CVE-2023-6585
HighPublic PoC
Published: 27 February 2024
Published
27 February 2024
Modified
01 May 2025
KEV Added
—
Patch
—
CVSS Score v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.0037
59.1th percentile
Risk Priority
15
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-6585 is a high-severity an unspecified weakness vulnerability in Eyecix Jobsearch Wp Job Board. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 40.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-58809
Vulnerability details
The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
eyecix
jobsearch wp job board
≤ 2.3.4
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.