CVE-2024-12131

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Jan 7, 2025
Updated: Feb 5, 2025
CWE ID 639

Summary

CVE-2024-12131: WP Job Portal plugin for WordPress, versions up to 2.2.5, suffers from an Insecure Direct Object Reference vulnerability. This issue allows authenticated attackers with Subscriber-level access and above to submit resumes for other applicants during the job application process, due to missing validation on a user-controlled key. This security flaw poses a risk for unauthorized data manipulation in recruitment processes. Organizations using the WP Job Portal plugin are advised to upgrade to the latest version to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share