WP Job Portal Insecure Direct Object Reference Vulnerability Allowing Arbitrary Job Deletion

A vulnerability exists in the WP Job Portal WordPress plugin, specifically in versions through 2.2.6. This issue is an Insecure Direct Object Reference (IDOR) that arises from inadequate validation of user-controlled keys in the 'jobenforcedelete' function. As a result, authenticated attackers with employer-level access or higher can delete arbitrary job postings.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of job postings by authenticated users with employer-level access or higher.

Remediation

Users are advised to update the WP Job Portal plugin to version 2.2.7 or a newer patched version.