CVE-2023-6584

The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.55% chance of exploitation in the next 30 days, 44th percentile

Published

2024-02-27

Updated

2025-04-22

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/e528e3cd-a45c-4bf7-a37a-101f5c257acd/

References

• CVE Record
• NVD entry

Related

• CVE-2023-6581
• CVE-2023-6585
• CVE-2023-6580
• CVE-2023-6591
• CVE-2023-6579
• CVE-2023-6592