CVE-2023-6584

JobSearch WP Job Board < 2.3.4 - Authentication Bypass

The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address.

Affected

WP JobSearch

CVSS v3.1 CNA

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.55% chance of exploitation in the next 30 days, 45th percentile

Published

2024-02-27

Updated

2025-04-22

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/e528e3cd-a45c-4bf7-a37a-101f5c257acd/

Security advisories

• https://wpscan.com/vulnerability/e528e3cd-a45c-4bf7-a37a-101f5c257acd

References

• CVE Record
• NVD entry