4.3
Moyenne
CVE-2021-4364 The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability…
Description
The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_add_job_import_schedule_call() function in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers to add and/or modify schedule calls.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| JobSearch WP Job Board 1.8 | premières → 1.8.1 | Pas de correctif indiqué |
| JobSearch WP Job Board 1.8 | premières → 1.8.1 | Pas de correctif indiqué |
Autres CVE de JobSearch WP Job Board
Les 6 CVE de JobSearch WP Job Board →
CVE-2024-11925
The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and…
9.8
Critique
CVE-2024-8615
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
10.0
Critique
CVE-2024-8614
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
9.9
Critique
CVE-2021-4361
The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability…
8.8
Élevée