CVE-2018-20974

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

CVE-2018-20974

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

CVE-2018-20974

CVE-2018-20974 affects the WordPress plugin js-jobs (JS Job Manager) prior to version 1.0.7. The root cause is CSRF due to insufficient verification of trusted-user requests, enabling forgery of cross-site actions. Impact details are limited to what is stated in the sources (CSRF with potential f...