7.5
High
CVE-2023-6584 The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only…
Description
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP JobSearch 2.3 | earliest → < 2.3.4 | 2.3.4 |
| wpjobsearch_wordpress 2.3 | earliest → < 2.3.4 | 2.3.4 |
Other CVEs of WP JobSearch
The 4 CVEs of WP JobSearch →
CVE-2023-6585
The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated…
7.5
High
CVE-2022-1168
There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1
Not rated
CVE-2021-24421
The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the…
Not rated