Lucene search
WPScanCVELIST:CVE-2023-6843HistoryJan 15, 2024 - 3:10 p.m.
CVE-2023-6843 easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update
2024-01-1515:10:39
WPScan
www.cve.org
4
cve-2023-6843
easy.jobs
wordpress
security
ajax
settings
logged-in users
The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress plugin before 2.4.7 does not properly secure some of its AJAX actions, allowing any logged-in users to modify its settings.
CNA Affected
[
{
"vendor": "Unknown",
"product": "easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "2.4.7"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
wpvulndb
wpvulndb
easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update
2023-12-22 00:00:00
prion
prion
Design/Logic Flaw
2024-01-15 16:15:00
wpexploit
wpexploit
easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update
2023-12-22 00:00:00
nvd
nvd
CVE-2023-6843
2024-01-15 16:15:12
cve
cve
CVE-2023-6843
2024-01-15 16:15:12