What’s Vulnerable › Vulnerabilities

CVE-2022-2558: Simple Job Board < 2.10.0 - Resume Disclosure via Directory Listing

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-22 · updated 2026-06-17
• Weakness: CWE-200

Description

The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations.

Affected products

• Simple Job Board: before 2.10.0 — fixed in 2.10.0

How to fix

Upgrade to a fixed version: Simple Job Board 2.10.0. Check the vendor advisory for mitigations.

References

• https://wpscan.com/vulnerability/6e096269-eedc-4614-88ce-6795c4adf32f
• https://wpscan.com/vulnerability/6e096269-eedc-4614-88ce-6795c4adf32f

Get alerted when CVE-2022-2558 or the next vulnerability affects your stack