plugin
2 known security issues reported for the Resume Upload Form WordPress plugin. Most recent disclosed May 24, 2023.
Running Resume Upload Form on your site? Check whether your installed version is affected.
Scan your site freeThe Upload Resume plugin for WordPress is vulnerable to captcha bypass via the form rendered by the 'resume_upload_form' shortcode in versions up to, and including, 1.2.0. This allows unauthenticated attackers to perform automated uploads of arbitrary media files.
The Upload Resume plugin for WordPress is vulnerable to Sensitive Information Disclosure via the 'resume_upload_form_list' shortcode in versions up to, and including, 1.2.0. This allows authenticated attackers with subscriber-level permissions or above to view the contents of all resumes uploaded to the site.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free