Civi Job Board and Freelance Marketplace WordPress Theme Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the Civi - Job Board & Freelance Marketplace WordPress Theme plugin, affecting all versions through 2.1.4. The issue arises from hard-coded credentials, which enable unauthenticated attackers to access sensitive data, including LinkedIn client and secret keys.

Impact

Exploitation of this vulnerability allows unauthenticated attackers to access sensitive information, specifically LinkedIn client and secret keys.

Remediation

There is no known patch available for this vulnerability. It is recommended to review the vulnerability details thoroughly and consider mitigations based on your organization's risk tolerance. Uninstalling the affected theme and finding a replacement may be the best course of action.