Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-4364
HistoryJun 07, 2023 - 2:15 a.m.

Authorization

2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
1
jobsearch
wp job board
wordpress
vulnerability
authorization bypass
capability check

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_add_job_import_schedule_call() function in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers to add and/or modify schedule calls.

CPENameOperatorVersion
jobsearch_wp_job_boardle1.8.1

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%

Related for PRION:CVE-2021-4364