CVE-2024-11925

The CVE-2024-11925 entry describes an authentication bypass in the JobSearch WP Job Board WordPress plugin (versions up to and including 2.6.7). The flaw arises from improper validation of a user’s identity during email verification in the user_account_activation function, allowing unauthenticate...

CVE-2024-11925: Authentication Bypass Using an Alternate Path or Channel

The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.6.7. This is due to the plugin not properly verifying a users identity when verifying an email address through the useraccountactivation function. This makes it possible f...