CVE-2024-0593mediumCWE-862

CVE-2024-0593: medium-severity vulnerability in presstigers Simple Job Board

Simple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure

Published · Updated

Follow this CVE+ Monitor Simple Job Board

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 5.3epss 0.9%
The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
presstigers · Simple Job Board
Related CVEs — presstigers Simple Job Board

In the same product, most dangerous first.

CVE-2024-1813CRITICALSimple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application FieldsEPSS 1.2%CVE-2024-7351HIGHSimple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object InjectionEPSS 0.6%