CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.1.
Explanation of Vulnerability in Simple Terms
JobWP exposes sensitive information without proper access controls. An unauthenticated attacker can read data that should be restricted, such as job listings, applicant details, or other plugin data. This affects all versions up to 2.1. Update immediately to a version newer than 2.1.
What an attacker can do
Read sensitive job board data without logging in, including job listings and applicant information.
Potential impact on your site
Applicant personal information, job details, and internal recruitment data are exposed to anyone on the internet.
Conditions required to exploit
None. The attacker needs only network access; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
