WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_register
criticalThe WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable sites. Please note that...
- CVSS:
- 9.8
- Affected:
- up to 1.2.85
- Fixed in:
- 1.2.85
- Disclosed:
- Feb 11, 2025