Authorization Bypass Vulnerability in JobSearch WP Job Board Plugin for WordPress

CVE-2021-4361

Summary

The JobSearch WP Job Board plugin, utilized within WordPress sites, is susceptible to an authorization bypass vulnerability. Due to a missing capability check in the jobsearch_job_integrations_settin_save AJAX action, an authenticated attacker may exploit this weakness to modify arbitrary settings on the site. This could lead to unauthorized changes and potential management of site configurations without proper permissions, emphasizing the need for timely updates and security measures.

References