WP JobHunt Plugin Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in the WP JobHunt plugin for WordPress, affecting all versions through 7.1. The issue arises because the 'wp_ajax_google_api_login_callback' function fails to properly verify user identity before authentication. This flaw enables unauthenticated attackers to access any candidate's account.

Impact

Exploitation of this vulnerability allows unauthenticated attackers to bypass authentication and gain access to arbitrary candidate accounts.

Remediation

There is no known patch available for this vulnerability. It is recommended to review the vulnerability details thoroughly and consider uninstalling the affected plugin.