What is CVE-2023-4933?

CVE-2023-4933 is a medium-severity vulnerability in Awsm Wp Job Openings, classified under Files or Directories Accessible to External Parties. CVSS score: 5.3/10. Published 2023-10-16.

How severe is CVE-2023-4933?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Is CVE-2023-4933 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Awsm Wp Job Openings

CVE-2023-4933

The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the directories where it stores attachments to job applications, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.

EPSS: 0.005 (42.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Awsm Wp_job_openings
Unknown Wp Job Openings — versions 0

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

Public proof-of-concept exploits

20142995/nuclei-templates

References

contact@wpscan.com (Exploit, technical-description, Third Party Advisory, exploit, vdb-entry)

Frequently asked questions

What is CVE-2023-4933?: CVE-2023-4933 is a medium-severity vulnerability in Awsm Wp Job Openings, classified under Files or Directories Accessible to External Parties. CVSS score: 5.3/10. Published 2023-10-16.
How severe is CVE-2023-4933?: Medium severity. CVSS v3 base score is 5.3 out of 10.
Is CVE-2023-4933 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.