What’s Vulnerable › Vulnerabilities

CVE-2020-35749

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 30.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-01-15 · updated 2026-06-17
• Weakness: CWE-22

Description

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.

Affected products

• PressTigers Simple Board Job: through 2.9.3

References

• http://packetstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.html
• http://packetstormsecurity.com/files/165892/WordPress-Simple-Job-Board-2.9.3-Local-File-Inclusion.html
• https://docs.google.com/document/d/1TbePkrRGsczepBaJptIdVRvfRrjiC5hjGg_Vxdesw6E/edit?usp=sharing
• http://packetstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.html
• http://packetstormsecurity.com/files/165892/WordPress-Simple-Job-Board-2.9.3-Local-File-Inclusion.html
• https://docs.google.com/document/d/1TbePkrRGsczepBaJptIdVRvfRrjiC5hjGg_Vxdesw6E/edit?usp=sharing

Get alerted when CVE-2020-35749 or the next vulnerability affects your stack