8.8
Élevée
CVE-2021-4361 The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability…
Description
The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_job_integrations_settin_save AJAX action in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers to update arbitrary options on the site.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| JobSearch WP Job Board 1.8 | premières → 1.8.1 | Pas de correctif indiqué |
| JobSearch WP Job Board 1.8 | premières → 1.8.1 | Pas de correctif indiqué |
Autres CVE de JobSearch WP Job Board
Les 6 CVE de JobSearch WP Job Board →
CVE-2024-11925
The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and…
9.8
Critique
CVE-2024-8615
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
10.0
Critique
CVE-2024-8614
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
9.9
Critique
CVE-2021-4364
The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability…
4.3
Moyenne