漏洞描述
WordPress Candidate Application Form <= 1.3 is susceptible to arbitrary file downloads because the code in downloadpdffile.php does not do any sanity checks.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wpscan.comhttps://wpscan.com/vulnerability/446233e9-33b3-4024-9b7d-63f9bb1dafe0↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2015-1000005↗www.vapidlabs.comhttp://www.vapidlabs.com/advisory.php?v=142↗github.comhttps://github.com/ARPSyndicate/cvemon↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗