What’s Vulnerable › Vulnerabilities

CVE-2015-6668

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-19 · updated 2026-06-17
• Weakness: CWE-200

Description

The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, related to an insecure direct object reference.

Affected products

• Job Manager: through 0.7.24

References

• https://vagmour.eu/cve-2015-6668-cv-filename-disclosure-on-job-manager-wordpress-plugin/
• https://wpvulndb.com/vulnerabilities/8167
• https://vagmour.eu/cve-2015-6668-cv-filename-disclosure-on-job-manager-wordpress-plugin/
• https://wpvulndb.com/vulnerabilities/8167

Get alerted when CVE-2015-6668 or the next vulnerability affects your stack