CVE-2023-7049

Name of the Vulnerable Software and Affected Versions Custom Field For WP Job Manager plugin for WordPress version 1.2 and earlier

Description The issue allows authenticated attackers with contributor-level access and above to expose potentially sensitive post metadata due to missing validation on the job id user-controlled key in the 'cm fieldshow' shortcode.

Recommendations For version 1.2 and earlier, consider disabling the 'cm fieldshow' shortcode until a patch is available to prevent exploitation. Restrict access to the job id variable to minimize the risk of exposing sensitive post metadata.