CVE-2021-4364

CVE-2021-4364 involves the WordPress plugin JobSearch WP Job Board . The vulnerability is an authorization bypass caused by a missing capability check in the function jobsearch_add_job_import_schedule_call() , affecting versions up to and including 1.8.1. This allows authenticated attackers to ad...

CVE-2021-4364 JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearchaddjobimportschedulecall function in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers to add and/or modify schedule calls...