VYPR
Unrated severityNVD Advisory· Published Mar 14, 2025· Updated Apr 8, 2026

WP JobHunt <= 7.1 - Authentication Bypass

CVE-2024-11286

Description

The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the cs_parse_request() function. This makes it possible for unauthenticated attackers to to log in to any user's account, including administrators.

Affected products

2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.