CVE-2024-7950

🗓️ 04 Sep 2024 03:15:04Reported by [email protected]Type

The WP Job Portal plugin for WordPress up to version 2.1.6 is vulnerable to Local File Inclusion, Arbitrary Settings Update, and User Creatio

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-7950	4 Sep 202406:01	–	circl
CNNVD	WordPress plugin WP Job Portal 路径遍历漏洞	4 Sep 202400:00	–	cnnvd
CVE	CVE-2024-7950	4 Sep 202402:33	–	cve
Cvelist	CVE-2024-7950 WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation	4 Sep 202402:33	–	cvelist
EUVD	EUVD-2024-48790	3 Oct 202520:07	–	euvd
Patchstack	WordPress WP Job Portal Plugin <= 2.1.6 is vulnerable to Broken Access Control	3 Sep 202400:00	–	patchstack
Patchstack	WordPress WP Job Portal plugin <= 2.1.6 - Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation vulnerability	3 Sep 202416:37	–	patchstack
Positive Technologies	PT-2024-38715 · WordPress · Wp Job Portal	3 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-7950	5 Feb 202511:53	–	redhatcve
Vulnrichment	CVE-2024-7950 WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation	4 Sep 202402:33	–	vulnrichment

NVD

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ca1d5275-3398-47a7-889b-4050ebe635ee
plugins	www.plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/modules/configuration/controller.php
plugins	www.plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/includes/includer.php
plugins	www.plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/modules/user/controller.php
plugins	www.plugins.trac.wordpress.org/changeset/3138675/
plugins	www.plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/includes/wpjobportal-hooks.php
plugins	www.plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/includes/formhandler.php
plugins	www.plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/modules/user/tmpl/views/frontend/form-field.php

04 Oct 2024 16:12Current

CVSS 3.19.8

EPSS0.00689