CVE-2020-35749

Name of the Vulnerable Software and Affected Versions: Simple Board Job plugin versions 2.9.3 and earlier

Description: A directory traversal issue allows remote attackers to read arbitrary files via the sjb file parameter to "wp-admin/post.php".

Recommendations: For Simple Board Job plugin versions 2.9.3 and earlier, consider disabling the class-simple job board resume download handler.php file until a patch is available. Restrict access to the "wp-admin/post.php" endpoint to minimize the risk of exploitation. Avoid using the sjb file parameter in the affected endpoint until the issue is resolved.