5.3
Medium
CVE-2021-4352 The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability…
Description
The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the save_locsettings function in versions up to, and including, 1.8.1. This makes it possible for unauthenticated attackers to change the settings of the plugin.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JobSearch WP Job Board 1.8 | earliest → 1.8.1 | No fix stated |
| JobSearch WP Job Board 1.8 | earliest → 1.8.1 | No fix stated |
Other CVEs of JobSearch WP Job Board
The 6 CVEs of JobSearch WP Job Board →
CVE-2024-11925
The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and…
9.8
Critical
CVE-2024-8615
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
10.0
Critical
CVE-2024-8614
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
9.9
Critical
CVE-2021-4364
The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability…
4.3
Medium