CVE-2021-4352

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the save_locsettings function in versions up to, and including, 1.8.1. This makes it possible for unauthenticated attackers to change the settings of the plugin.

• CWE-284
• CWE-863

• https://blog.nintechnet.com/wordpress-jobsearch-wp-job-board-plugin-fixed-vulnerability/Exploit
• https://wpscan.com/vulnerability/ed7e664e-5a73-4d2d-a599-a0be89d6c2d1Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/59170f0a-975e-487c-bdb0-585c802b3127?source=cveThird Party Advisory
• https://blog.nintechnet.com/wordpress-jobsearch-wp-job-board-plugin-fixed-vulnerability/Exploit
• https://wpscan.com/vulnerability/ed7e664e-5a73-4d2d-a599-a0be89d6c2d1Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/59170f0a-975e-487c-bdb0-585c802b3127?source=cveThird Party Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43510SQL Injection vulnerability exists in Sourcecodester Simple …9.8
• CVE-2021-43512An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8…5.5
• CVE-2021-43515CSV Injection (aka Excel Macro Injection or Formula Injectio…7.8
• CVE-2021-43517FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012…9.8
• CVE-2021-43518Teeworlds up to and including 0.7.5 is vulnerable to Buffer …7.8
• CVE-2021-43519Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1…5.5
• CVE-2021-43521A Buffer Overflow vulnerability exists in zlog 1.2.15 via zl…7.5
• CVE-2021-43522An issue was discovered in Insyde InsydeH2O with kernel 5.1 …7.5
• CVE-2021-43523In uClibc and uClibc-ng before 1.0.39, incorrect handling of…9.6
• CVE-2021-43527NSS (Network Security Services) versions prior to 3.73 or 3.…9.8
• CVE-2021-43528Thunderbird unexpectedly enabled JavaScript in the compositi…6.5
• CVE-2021-43529Thunderbird versions prior to 91.3.0 are vulnerable to the h…9.8