Job Listings
Approved changes feed: RSS · Atom
cpe:2.3:a:nootheme:job_listings:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nootheme (605deb65-511e-57cf-a5f4-6d840e31956c) |
|---|---|
| Product | Job Listings (c706576a-d6e6-5aae-b505-3e859690f914) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3918 |
vulnerable | 2026-06-08 07:23:10.144333 |
Job Listings 0.1 - 0.1.1 - Unauthenticated Privilege Escalation via register_action Function
CRITICAL (9.8)
The Job Listings plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization within the register_action() function in versions 0.1 to 0.1.1. The plugin’s registration handler reads the client-supplied $_POST['user_role'] and passes it directly to wp_insert_user() without restricting to a safe set of roles. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
Published: 2025-05-03T01:43:06.908Z
Updated: 2025-05-06T15:03:50.627Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.