CVE-2024-12132: WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create jobs for companies that are unaffiliated with the attacker.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12132?
CVE-2024-12132 is considered a high severity vulnerability due to the potential for unauthorized access to sensitive data.
How do I fix CVE-2024-12132?
To fix CVE-2024-12132, update the WP Job Portal plugin to version 2.2.5 or later, where the vulnerability has been addressed.
What type of vulnerability is CVE-2024-12132?
CVE-2024-12132 is classified as an Insecure Direct Object Reference vulnerability.
Who is affected by CVE-2024-12132?
Users of the WP Job Portal plugin for WordPress using versions up to and including 2.2.4 are affected by CVE-2024-12132.
What can attackers do with CVE-2024-12132?
Attackers can exploit CVE-2024-12132 to gain unauthorized access to user data or perform unauthorized actions.