CVE-2021-4361

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_job_integrations_settin_save AJAX action in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers to update arbitrary options on the site.

• CWE-284
• CWE-862

• https://blog.nintechnet.com/wordpress-jobsearch-wp-job-board-plugin-fixed-vulnerability/Exploit
• https://wpscan.com/vulnerability/a69aa52f-9876-4180-97a4-713459b43f24Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/839a0cc0-a656-4107-a748-4ad85e950237?source=cveThird Party Advisory
• https://blog.nintechnet.com/wordpress-jobsearch-wp-job-board-plugin-fixed-vulnerability/Exploit
• https://wpscan.com/vulnerability/a69aa52f-9876-4180-97a4-713459b43f24Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/839a0cc0-a656-4107-a748-4ad85e950237?source=cveThird Party Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43589Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT vers…6.7
• CVE-2021-4359The Frontend File Manager plugin for WordPress is vulnerable…5.3
• CVE-2021-43590Dell EMC Enterprise Storage Analytics for vRealize Operation…6
• CVE-2021-4360The Controlled Admin Access plugin for WordPress is vulnerab…8.8
• CVE-2021-43608Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The esc…9.8
• CVE-2021-43609An issue was discovered in Spiceworks Help Desk Server befor…8.8
• CVE-2021-43610Belledonne Belle-sip before 5.0.20 can crash applications su…7.5
• CVE-2021-43611Belledonne Belle-sip before 5.0.20 can crash applications su…7.5
• CVE-2021-43612In lldpd before 1.0.13, when decoding SONMP packets in the s…7.5
• CVE-2021-43615An issue was discovered in HddPassword in Insyde InsydeH2O w…8.2
• CVE-2021-43616The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds…9.8
• CVE-2021-43617Laravel Framework through 8.70.2 does not sufficiently block…9.8