CVE-2022-2558: 
WordPress vulnerability analysis and mitigation

The Simple Job Board WordPress plugin versions before 2.10.0 contain a Directory Listing vulnerability identified as CVE-2022-2558. This security issue was discovered and publicly disclosed on August 1, 2022. The vulnerability affects the resume upload functionality of the Simple Job Board plugin (WPScan).

The vulnerability is classified as a Sensitive Data Disclosure issue (CWE-200) with a CVSS score of 5.3 (Medium). The security flaw allows public listing of uploaded resumes in certain configurations through directory listing functionality. The vulnerability can be exploited by accessing the path /wp-content/uploads/jobpost on affected WordPress installations (WPScan).

When exploited, this vulnerability allows unauthorized users to access and view uploaded resumes stored in the system. This leads to exposure of sensitive personal information contained within the resume documents that were intended to be private (WPScan).

The vulnerability has been fixed in Simple Job Board version 2.10.0. Users are advised to update to this version or later to protect against unauthorized access to uploaded resumes (WPScan).