WP JobHunt Privilege Escalation Vulnerability via Email Update in WordPress

A privilege escalation vulnerability allowing account takeover has been identified in the WP JobHunt plugin for WordPress, affecting all versions through 7.1. The issue arises because the plugin fails to properly validate a user's identity before allowing changes to account details, such as email addresses, through the account_settings_callback() function. This vulnerability enables unauthenticated attackers to modify email addresses of any user, including administrators. Once an email address is changed, the attacker can reset the user's password and gain access to their account.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation and account takeover, enabling attackers to gain access to user accounts with potentially elevated privileges, such as administrator rights.