CVE-2024-12810: JobCareer | Job Board Responsive WordPress Theme <= 7.1 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrative Actions
The JobCareer | Job Board Responsive WordPress Theme theme for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 7.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files, generate backups, restore backups, update theme options, and reset theme options to default settings.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12810?
CVE-2024-12810 is considered a critical vulnerability due to its potential for unauthorized access and data modification.
How do I fix CVE-2024-12810?
To fix CVE-2024-12810, update the JobCareer Job Board Responsive WordPress Theme to version 7.2 or later.
What versions of the JobCareer theme are affected by CVE-2024-12810?
CVE-2024-12810 affects all versions of the JobCareer theme up to and including version 7.1.
What type of access can be gained through CVE-2024-12810?
CVE-2024-12810 allows authenticated users to perform unauthorized actions, leading to potential data loss and modification.
Who is impacted by CVE-2024-12810?
Users of the JobCareer Job Board Responsive WordPress Theme versions up to 7.1 are impacted by CVE-2024-12810.