WordPress JobSearch Plugin Authorization Bypass Vulnerability Allowing Insecure Direct Object References
Vulnerability
A vulnerability allowing authorization bypass through user-controlled keys has been identified in the WordPress JobSearch plugin, affecting versions 2.9.0 and prior. This issue arises from incorrectly configured access control security levels, which can be exploited to manipulate authorization and access sensitive resources.
Impact
Exploitation of this vulnerability could lead to insecure direct object references, allowing unauthorized access to sensitive files, folders, or database interactions.
Added: Jun 20, 2025, 5:41 PM
Updated: Jun 20, 2025, 5:41 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
4.8remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.