CVE-2023-6843

2024-01-1516:15:12

[email protected]

web.nvd.nist.gov

cve-2023-6843

easy.jobs

recruitment

wordpress

plugin

security

vulnerability

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

JSON

The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress plugin before 2.4.7 does not properly secure some of its AJAX actions, allowing any logged-in users to modify its settings.

Affected configurations

Vulners

NVD

Node

themehighjob_manager_\&_careerRange<2.4.7

VendorProductVersionCPE
themehighjob_manager_\&_career*cpe:2.3:a:themehigh:job_manager_\&_career:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
themehigh	job_manager_\&_career	*	cpe:2.3:a:themehigh:job_manager_\&_career::::::::

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "2.4.7"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]