CVE-2025-49324: WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability
Missing Authorization vulnerability in PickPlugins Job Board Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Job Board Manager: from n/a through 2.1.60.
Other sources
Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through <= 2.1.60.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49324?
CVE-2025-49324 is a high severity vulnerability due to its potential impact on access control.
How can I fix CVE-2025-49324?
To fix CVE-2025-49324, update the PickPlugins Job Board Manager to the latest version available.
Which versions of PickPlugins Job Board Manager are affected by CVE-2025-49324?
CVE-2025-49324 affects all versions of PickPlugins Job Board Manager up to and including version 2.1.60.
What issue does CVE-2025-49324 exploit?
CVE-2025-49324 exploits missing authorization due to incorrectly configured access control security levels.
Who should be concerned about CVE-2025-49324?
Users and administrators of the PickPlugins Job Board Manager plugin should be concerned about CVE-2025-49324.