CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through <= 2.4.3.
Explanation of Vulnerability in Simple Terms
WP Job Portal versions 2.4.3 and earlier contain an authorization flaw that allows authenticated users to disrupt site availability. An attacker with a low-privilege account can trigger a denial-of-service condition affecting the entire site. No user interaction is required once the attacker is logged in. Update to a version newer than 2.4.3.
What an attacker can do
Disrupt site availability by triggering a denial-of-service condition.
Potential impact on your site
Site availability can be disrupted by any authenticated user, even those with minimal permissions.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
