CVE-2023-23715 WordPress JobBoardWP – Job Board Listings and Submissions plugin <= 1.2.2 - IDOR Leading To Job Removal Vulnerability
Attackers can remove job listings without proper authorization due to missing access controls in the JobBoardWP plugin.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-23715?
CVE-2023-23715 is a medium-severity missing authorization vulnerability in JobBoardWP – Job Board Listings and Submissions, published on 9 Dec 2024. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoardWP – Job Board Listings and Submissions: from n/a through 1.2.2.
Weakness: CWE-862
Which versions are affected by CVE-2023-23715?
It affects 1 product.
Products include Ultimatemember Jobboardwp.
How do I fix CVE-2023-23715?
No fix has been published for CVE-2023-23715 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2023-23715 being exploited?
There is no known exploitation of CVE-2023-23715 in the wild and no public exploit code.
Other vulnerabilities in JobBoardWP – Job Board Listings and Submissions
Sources
Also known as GHSA-crfq-94qw-vfrw.