TI-2024-10456 CVE-2024-11286 · GHSA-jmr6-wh5f-876q
WP JobHunt <= 7.1 - Authentication Bypass
Priority MEDIUM 50
The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1.
Chimp Group
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Chimp Group records in CISA KEVNo Chimp Group vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Jobcareer · all components
TI-2024-10454 CVE-2024-11284 · GHSA-jh23-v8pg-3gxq
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
Priority MEDIUM 50
The WP JobHunt plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.9.
TI-2024-10455 CVE-2024-11285 · GHSA-wr66-px74-574m
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover
Priority MEDIUM 49
The WP JobHunt plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 7.1.
TI-2024-11871 CVE-2024-12810 · GHSA-p844-gjc4-j9h6
Missing authorization in JobCareer | Job Board Responsive WordPress Theme
Priority MEDIUM 40
The JobCareer | Job Board Responsive WordPress Theme theme for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to…
TI-2024-10453 CVE-2024-11283 · GHSA-9p64-vwxm-hxqm
WP JobHunt <= 7.1 - Authentication Bypass to Candidate
Priority LOW 39
The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1.