CVE-2024-11715: WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the assignUserRole() function in all versions up to, and including, 2.2.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an employer.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11715?
CVE-2024-11715 has a high severity rating due to the potential for unauthorized access to user roles.
How do I fix CVE-2024-11715?
To fix CVE-2024-11715, upgrade the WP Job Portal plugin to version 2.2.3 or later.
What specific issue does CVE-2024-11715 address?
CVE-2024-11715 addresses a missing capability check on the assignUserRole() function in the WP Job Portal plugin.
Which versions of the WP Job Portal are affected by CVE-2024-11715?
All versions of the WP Job Portal plugin up to and including 2.2.2 are affected by CVE-2024-11715.
Is user authentication impacted by CVE-2024-11715?
Yes, CVE-2024-11715 allows unauthorized users to gain access to functionalities intended for authenticated users.