NiceJob vulnerable to Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS)

CVE-2024-44028

What is CVE-2024-44028?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Nicejob Plugin for WordPress. This vulnerability can allow malicious actors to execute unintended actions on behalf of authenticated users. Specifically, it could facilitate Stored Cross-Site Scripting (XSS), where harmful scripts are injected and stored within the application. This flaw predominantly affects versions earlier than 3.6.5, posing risks to data integrity and user safety. Site administrators are encouraged to update to the latest version to mitigate any potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References