CVE-2024-12132
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 3, 2025
Updated: Feb 5, 2025
CWE ID 639
Summary
CVE-2024-12132 is a vulnerability affecting the WP Job Portal plugin for WordPress up to version 2.2.4. This issue stems from a lack of validation on user-controlled keys, exposing an Insecure Direct Object Reference. Authenticated attackers with Subscriber-level access or higher can exploit this vulnerability to create jobs for companies unrelated to their own account, potentially causing confusion and misrepresentation. This weakness could lead to unauthorized job postings and undesirable consequences for legitimate users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.