Authorization Bypass in JobSearch WP Job Board Plugin for WordPress

CVE-2021-4352

Summary

The JobSearch WP Job Board plugin for WordPress is susceptible to an authorization bypass due to a lack of capability checks in the save_locsettings function. This vulnerability allows unauthenticated attackers to modify plugin settings, potentially jeopardizing the integrity and security of the WordPress site. Websites utilizing affected versions (up to and including 1.8.1) should prioritize updating the plugin to mitigate risks associated with unauthorized changes.

References