Lucene search
MitreCVELIST:CVE-2018-19488HistoryMar 17, 2019 - 9:37 p.m.
CVE-2018-19488
2019-03-1721:37:51
mitre
www.cve.org
The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_reset_pass() function through the admin-ajax.php file, which allows remote unauthenticated attackers to reset the password of a user’s account.
Related
cve
cve
CVE-2018-19488
2019-03-21 16:00:31
prion
prion
Default credentials
2019-03-21 16:00:00
checkpoint_advisories
checkpoint_advisories
WordPress JobCareer Plugin Authentication Bypass (CVE-2018-19488)
2020-05-24 00:00:00
nvd
nvd
CVE-2018-19488
2019-03-21 16:00:31
wpvulndb
wpvulndb
JobCareer < 2.4.1 - User enumeration & Reset password
2018-12-04 00:00:00