cve/2022/CVE-2022-4061.md

CVE-2022-4061

Description

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.

POC

Reference

• https://wpscan.com/vulnerability/fec68e6e-f612-43c8-8301-80f7ae3be665

Github

• https://github.com/cyllective/CVEs
• https://github.com/devmehedi101/wordpress-exploit
• https://github.com/im-hanzou/JBWPer
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/securi3ytalent/wordpress-exploit