HIGH

CVE-2020-35749

CVSS v3

7.7

HIGH

EPSS Score

76.8%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.

Technical details

Published
1/15/2021

Frequently asked questions

What is CVE-2020-35749?

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.

Is CVE-2020-35749 actively exploited?

Active exploitation of CVE-2020-35749 has not been confirmed. The EPSS score is 76.8%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-35749?

CVE-2020-35749 has a CVSS v3 base score of 7.7 (HIGH severity).

Is CVE-2020-35749 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.