CVE-2024-7762 Simple Job Board < 2.12.6 - Unauthenticated Resumes Download
Unauthenticated attackers can list and download uploaded resumes due to missing access controls in the Simple Job Board plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-7762?
CVE-2024-7762 is a low-severity vulnerability in Unknown Simple Job Board, published on 15 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes
Which versions are affected by CVE-2024-7762?
It affects 1 product.
Products include Presstigers Simple Job Board.
How do I fix CVE-2024-7762?
No fix has been published for CVE-2024-7762 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-7762 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-7762 exists.
Other vulnerabilities in Unknown Simple Job Board
- CVE-2024-1813 Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
- CVE-2024-7351 Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
- CVE-2024-7761 Simple Job Board < 2.12.2 - Admin+ Stored XSS
- CVE-2017-18498 Cross-site scripting in n/a
- CVE-2021-39328 Simple Job Board <= 2.9.4 Authenticated Stored Cross-Site Scripting
Sources
Also known as GHSA-p9xg-r2f4-c78v.