Shahinurislam vulnerabilities
We track 2 vulnerabilities in Shahinurislam products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Shahinurislam vulnerabilities
- 9.8 Critical severity
Career Section: Unrestricted Upload of File with Dangerous Type
The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload file
- 8.8 High severity
Career Section: Improper Limitation of a Pathname to a Restricted Directory
The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to missing nonce validation and insufficient file path validation o