CVE-2024-12213

CVE-2024-12213 affects the WordPress plugin WP Job Board Pro, where an attacker can specify the role during user registration, enabling unauthenticated privilege escalation to administrator on vulnerable sites. Technical details in connected docs indicate the issue arises from processing the regi...

CVE-2024-12296

CVE-2024-12296 — Apus Framework (WordPress) vulnerability : The Apus Framework plugin is affected in versions up to 2.3. It has a missing capability check in the import_page_options function, allowing authenticated users with Subscriber-level access or higher to perform arbitrary options updates....

CVE-2022-4114

CVE-2022-4114 affects the Superio WordPress theme’s Job Board feature, with versions earlier than 1.2.33 (per multiple sources) vulnerable due to inadequate sanitisation and escaping of certain parameters. This enables a Stored Cross-Site Scripting (XSS) attack where an attacker with a low privil...