VULNERABILITY INTELLIGENCE

CVE-2022-2544

CVSS score7.5 HIGH

EPSS probability4.55%

CISA KEVNot currently listed

Published2022-08-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.

Weakness classification

CWE-425: Direct Request ('Forced Browsing')

Primary references

contact@wpscan.com — Patch, Third Party Advisory
contact@wpscan.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory