Vulnerability · Published Feb 21, 2024 · Assigned by Wordfence
CVE-2024-0593Simple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure
Medium 5.3
In plain English
A medium-severity missing authorization in Simple Job Board from presstigers. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| presstigers | Simple Job Board | 0 – through 2.10.8 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N