CVE-2024-55993

CVE-2024-55993 is a Missing Authorization vulnerability in the WordPress plugin Job Board Manager (PickPlugins). Public details confirm affected software: Job Board Manager versions ≤ 2.1.60. The Red Hat and Wordfence entries describe the issue as an authorization/configuration flaw allowing acce...

CVE-2024-55993 WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control vulnerability

Missing Authorization vulnerability in PickPlugins Job Board Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through 2.1.60...

WordPress plugin Job Board Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-55993: Missing Authorization

Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through = 2.1.61...

CVE-2024-49322

Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress jemployee allows Privilege Escalation.This issue affects Job Board Manager for WordPress: from n/a through = 1.0...

CVE-2024-49322 WordPress Job Board Manager for WordPress plugin <= 1.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress jemployee allows Privilege Escalation.This issue affects Job Board Manager for WordPress: from n/a through = 1.0...

CVE-2024-49322

CVE-2024-49322 is a vulnerability in the WordPress plugin Job Board Manager for WordPress (CodePassenger) that grants unauthenticated privilege escalation due to an incorrect privilege assignment. The entry (NVD/Red Hat/Patchstack/WP report) lists a high-impact, network-based issue with a CVSS v3...

CVE-2024-49322 WordPress Job Board Manager for WordPress plugin <= 1.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress jemployee allows Privilege Escalation.This issue affects Job Board Manager for WordPress: from n/a through = 1.0...

PT-2024-33463 · WordPress · Job Board Manager

Name of the Vulnerable Software and Affected Versions: Job Board Manager for WordPress versions 1.0 and earlier Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in the Job Board Manager for WordPress. This flaw enables attacke...

WordPress plugin Job Board Manager for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-49322: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress jemployee allows Privilege Escalation.This issue affects Job Board Manager for WordPress: from n/a through = 1.0...

WordPress Job Board Manager for WordPress plugin <= 1.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Job Board Manager for WordPress versions = 1.0...

WordPress Job Board Manager for WordPress Plugin <= 1.0 is vulnerable to Privilege Escalation

Software Job Board Manager for WordPress Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-49322 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID d9004d540adc Credits João Pedro S...

CVE-2024-38722

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager allows Stored XSS.This issue affects Job Board Manager: from n/a through 2.1.57...

CVE-2024-38722 WordPress Job Board Manager plugin <= 2.1.57 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager allows Stored XSS.This issue affects Job Board Manager: from n/a through 2.1.57...

CVE-2024-38722

CVE-2024-38722 affects the WordPress plugin Job Board Manager (PickPlugins) and is a Stored XSS vulnerability in versions up to 2.1.57; root cause is improper input neutralization during web page generation. Public sources indicate an update path to 2.1.58 or later to remediate. No exploitation d...

CVE-2024-38722 WordPress Job Board Manager plugin <= 2.1.57 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager allows Stored XSS.This issue affects Job Board Manager: from n/a through 2.1.57...

PT-2024-28168 · Unknown · Job Board Manager

Name of the Vulnerable Software and Affected Versions: Job Board Manager versions prior to 2.1.58 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

WordPress Job Board Manager plugin <= 2.1.57 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by younsoung kim, SeoHyeon Lee, MyungJu Kim, SeoHee Kang in WordPress Plugin Job Board Manager versions = 2.1.57...

WordPress Job Board Manager Plugin <= 2.1.57 is vulnerable to Cross Site Scripting (XSS)

Software Job Board Manager Type Plugin Vulnerable versions = 2.1.57 Fixed in 2.1.59 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38722 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID daeb0ba3a33e Credits younsoung kim, SeoHyeon Lee,...