CVE-2021-4352

Name of the Vulnerable Software and Affected Versions JobSearch WP Job Board plugin for WordPress versions up to, and including, 1.8.1

Description The issue is related to authorization bypass due to a missing capability check on the save locsettings function. This allows unauthenticated attackers to change the plugin's settings.

Recommendations For versions up to, and including, 1.8.1, update to a version that includes a fix for the missing capability check in the save locsettings function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.