Privilege Escalation Vulnerability in WP JobHunt Plugin for WordPress

CVE-2024-11284

Summary

The WP JobHunt plugin is susceptible to privilege escalation due to improper validation of user identities when updating passwords via the account_settings_save_callback() function. This flaw allows unauthenticated attackers to change the passwords of any user, including those with administrative privileges, thus facilitating unauthorized access to their accounts. Users are advised to implement security measures and update to the latest version to mitigate this risk.

References