CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects WordPress.
CVE
CVE-2023-4933
Severity
MEDIUM
CVSS
5.3
EPSS
0.54%
WordPress
Original NVD Description
The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the directories where it stores attachments to job applications, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.
Related CVEs
Other vulnerabilities affecting the same vendor(s)