Skip to content
Sign in
4.3 Medium

CVE-2021-4364 The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability…

Description

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_add_job_import_schedule_call() function in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers to add and/or modify schedule calls.

Affected products and versions

Product Affected versions Fixed in
JobSearch WP Job Board 1.8 earliest → 1.8.1 No fix stated
JobSearch WP Job Board 1.8 earliest → 1.8.1 No fix stated

Other CVEs of JobSearch WP Job Board

The 6 CVEs of JobSearch WP Job Board →
CVE-2024-11925 The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and… 9.8 Critical CVE-2024-8615 The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type… 10.0 Critical CVE-2024-8614 The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type… 9.9 Critical CVE-2021-4361 The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability… 8.8 High
Track this CVE