WordPress WP Job Portal Plugin <= 2.2.6 is vulnerable to Insecure Direct Object References (IDOR)

Low priority No impactful threat

<= 2.2.6Vulnerable version(s)

2.2.7Patched version

31 Jan, 2025

Get the fastest vulnerability mitigation with Patchstack!

CVSS 4.3

As immediate action, update the affected plugin. If you're unable to do so, ask your hosting provider or web developer for help.

Other Similar CVE IDs: CVE-2024-13429

Changing an ID in the URL can expose other people's data.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

This security issue has a low severity impact and is unlikely to be exploited.

Update to version 2.2.7 or later to resolve the vulnerability.

Have additional information or questions about this entry? Let us know.

Go to

Published by Patchstack

31 Jan, 2025