1 results (0.001 seconds)

CVSS: 5.3EPSS: %CPEs: 1EXPL: 0

The WP Job Openings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the insert_application() function in versions up to, and including, 3.4.1. This makes it possible for unauthenticated attackers to submit applications on unpublished jobs. • CWE-862: Missing Authorization •