NooTheme Jobica Core Authentication Bypass Vulnerability Allowing Account Takeover

A vulnerability allowing authentication bypass has been identified in the NooTheme Jobica Core plugin, specifically in versions through 1.4.2. This flaw enables authentication abuse, potentially allowing unauthorized users to gain access to accounts or perform actions reserved for higher-privileged users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to user accounts, with the potential for gaining administrative privileges on the affected WordPress site.

Remediation

Users are advised to update the Jobica Core plugin to the latest version. If an update is not possible, consult with your hosting provider or web developer for assistance.