CVE-2024-12132
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 3, 2025
CWE ID 639
Summary
CVE-2024-12132: The WP Job Portal plugin for WordPress, up to version 2.2.4, suffers from an Insecure Direct Object Reference vulnerability. This flaw, caused by missing validation on a user-controlled key, allows authenticated attackers with Subscriber-level access or higher to create jobs for unrelated companies, potentially leading to unauthorized recruitment activities.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- WP Job Portal Plugin
Affected Vendors
- WordPress