WordPress Plugin Vulnerabilities
JobCareer < 2.4.1 - User enumeration & Reset password
Description
The theme used a vulnerable version of the WP-jobhunt plugin affected by the issues below:
CVE-2018-19487:
The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profile() function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users.
CVE-2018-19488:
The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_reset_pass() function through the admin-ajax.php file, which allows remote unauthenticated attackers to reset the password of a user's account.
Affects Plugins
Fixed in 2.4 Affects Themes
Fixed in 2.4.1 References
Classification
Type
ACCESS CONTROLS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Anthony MAESTRE
Submitter
Anthony MAESTRE
Verified
No
WPVDB ID
Timeline
Publicly Published
2018-12-04 (about 7 years ago)
Added
2019-01-25 (about 7 years ago)
Last Updated
2020-12-09 (about 5 years ago)
WPScan 