CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress jemployee allows Privilege Escalation.This issue affects Job Board Manager for WordPress: from n/a through <= 1.0.
Explanation of Vulnerability in Simple Terms
Job Board Manager for WordPress versions 1.0 and earlier contain a critical vulnerability that allows unauthenticated attackers to read sensitive data, modify site content, and disrupt service without any user interaction. The vulnerability stems from improper privilege validation in the plugin's core functionality. All installations of this plugin require immediate update or removal.
What an attacker can do
Read sensitive data, modify or delete site content, and disrupt the site's availability without logging in.
Potential impact on your site
Your site's data, content, and availability are at immediate risk from any internet user.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
