CVE-2023-6843: easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update
Published Jan 15, 2024
·Updated
The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress plugin before 2.4.7 does not properly secure some of its AJAX actions, allowing any logged-in users to modify its settings.
Affected Software
1 affected component
easy.jobs Easy.jobs Wordpress<2.4.7
Event History
Jan 15, 2024
CVE Published
via MITRE·03:10 PM
Data Sourced
via MITRE·03:10 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-6843?
CVE-2023-6843 has been classified as a high-severity vulnerability due to its potential for unauthorized settings modification.
2
How do I fix CVE-2023-6843?
To resolve CVE-2023-6843, upgrade the Easy.jobs plugin to version 2.4.7 or later.
3
Who is affected by CVE-2023-6843?
CVE-2023-6843 affects users of the Easy.jobs WordPress plugin prior to version 2.4.7.
4
What type of vulnerability is CVE-2023-6843?
CVE-2023-6843 is an authorization issue that allows logged-in users to modify plugin settings.
5
When was CVE-2023-6843 disclosed?
CVE-2023-6843 was disclosed in late 2023, highlighting critical security concerns in earlier versions of the plugin.