Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-6843 EUVD-2023-59047GHSA-vpwp-7q6f-84v5

easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update

Published Jan 15, 2024 · Updated Jun 3, 2025 · Assigned by WPScan

Description

The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress plugin before 2.4.7 does not properly secure some of its AJAX actions, allowing any logged-in users to modify its settings.

Affected products

VendorProductAffectedFixed
— easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg < 2.4.7 2.4.7

References