5.3
Moyenne
CVE-2021-4352 The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability…
Description
The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the save_locsettings function in versions up to, and including, 1.8.1. This makes it possible for unauthenticated attackers to change the settings of the plugin.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| JobSearch WP Job Board 1.8 | premières → 1.8.1 | Pas de correctif indiqué |
| JobSearch WP Job Board 1.8 | premières → 1.8.1 | Pas de correctif indiqué |
Autres CVE de JobSearch WP Job Board
Les 6 CVE de JobSearch WP Job Board →
CVE-2024-11925
The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and…
9.8
Critique
CVE-2024-8615
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
10.0
Critique
CVE-2024-8614
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
9.9
Critique
CVE-2021-4364
The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability…
4.3
Moyenne