CVE-2023-6843

easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update

MEDIUM 4.3EPSS 0.4%

The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress plugin before 2.4.7 does not properly secure some of its AJAX actions, allowing any logged-in users to modify its settings.

Affected: easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg
CVSS v3.1 NVD: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS: 0.40% chance of exploitation in the next 30 days, 33rd percentile
Published: 2024-01-15
Updated: 2025-06-03

Proof-of-concept exploits (1)

https://wpscan.com/vulnerability/41508340-8caf-4dca-bd88-350b63b78ab0

References

CVE Record
NVD entry