WP JobHunt Plugin Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in the WP JobHunt plugin for WordPress, affecting all versions through 7.1. The issue arises because the plugin fails to properly verify a user's identity before authenticating them via the cs_parse_request() function. This flaw enables unauthenticated attackers to log in to any user's account, including those of administrators.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain unauthorized access to any user's account, potentially including administrative accounts.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.