7.5
Élevée
CVE-2023-6584 The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only…
Description
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP JobSearch 2.3 | premières → < 2.3.4 | 2.3.4 |
| wpjobsearch_wordpress 2.3 | premières → < 2.3.4 | 2.3.4 |
Autres CVE de WP JobSearch
Les 4 CVE de WP JobSearch →
CVE-2023-6585
The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated…
7.5
Élevée
CVE-2022-1168
There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1
Non notée
CVE-2021-24421
The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the…
Non notée