CVE-2024-11715

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the assignUserRole function in all versions up to, and including, 2.2.2. This makes it possible for unauthenticated...

PT-2024-17205 · WordPress · Wp Job Portal

Name of the Vulnerable Software and Affected Versions: WP Job Portal – A Complete Recruitment System plugin for WordPress versions up to, and including, 2.2.2 Description: The WP Job Portal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the...

CVE-2024-11715: Missing Authorization

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the assignUserRole function in all versions up to, and including, 2.2.2. This makes it possible for unauthenticated...

CVE-2022-30356: Incorrect Authorization

OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters . Authentication is required with OEADMIN role privilege...

PT-2024-11554

Name of the Vulnerable Software and Affected Versions OvalEdge versions 5.2.8.0 and earlier Description The issue allows for Privilege Escalation via a POST request to "/user/assignuserrole" using the userid and role parameters. Authentication is required with OE ADMIN role privilege...