CVE-2023-2751 Information

Description

The Upload Resume WordPress plugin through 1.2.0 does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode allowing unauthenticated visitors to upload arbitrary media files to the site.

Reference

https://wpscan.com/vulnerability/1b0fe0ac-d0d1-473d-af5b-dad6217933d4