Back to Database
Status published
High
CVE-2020-35749
Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job...
Vulnerability Description
Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-35749
Credits & Attribution
No credits recorded in the NVD database.
References
More from presstigers
View All →CVE-2025-14353
ZIP Code Based Content Protection <= 1.0.2 - Unauthenticated SQL Injection via 'zipcode' Parameter
High
7.5
CVE-2025-14039
Simple Folio <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fields
Medium
6.4
CVE-2025-12151
Simple Folio <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
6.4
CVE-2024-7351
Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
High
7.2
CVE-2024-1813
Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
Critical
9.8
Affected Vendor
presstigers
View all reports →Affected Software
simple board job
Vulnerable Versions:
0
Timeline
Official Publish:
January 15th, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.