| |
Vulnerability CVE-2023-2751
Published: 2023-06-19
| Description: |
The Upload Resume WordPress plugin through 1.2.0 does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site. |
Type:
CWE-639 (Authorization Bypass Through User-Controlled Key)
References: |
https://wpscan.com/vulnerability/1b0fe0ac-d0d1-473d-af5b-dad6217933d4
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
