CVE-2023-23715 – JobBoardWP <= 1.2.2 - Missing Authorization to Job Posting Manipulation

https://notcve.org/view.php?id=CVE-2023-23715

The JobBoardWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the actions_listener() function in versions up to, and including, 1.2.2. This makes it possible for authenticated attackers to manipulate other jobs postings than those that belong to them. • CWE-862: Missing Authorization •