Job Listings WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Job Listings plugin for WordPress, affecting versions 0.1 to 0.1.1. The issue arises from improper authorization in the register_action() function, where the plugin's registration handler directly passes user-supplied role data to wp_insert_user() without validating it against a safe list of roles. This flaw allows unauthenticated attackers to gain administrative privileges.

Impact

Exploitation of this vulnerability allows unauthenticated users to elevate their privileges to that of an administrator.