Meghnine Islem

**Name of the Vulnerable Software and Affected Versions** WP JobHunt plugin for WordPress versions prior to 7.8 **Description** The WP JobHunt plugin for WordPress is susceptible to an Insecure Direct Object Reference issue. This affects versions up to and including 7.7, stemming from a lack of validation on a user-controlled key within the `cs update application status callback` function. Authenticated attackers with Candidate-level access or higher can exploit this to send a site-generated email containing injected HTML to any user. The vulnerable parameter is a user-controlled key. **Recommendations** Update the WP JobHunt plugin to version 7.8 or later.

**Name of the Vulnerable Software and Affected Versions** WP JobHunt plugin for WordPress versions prior to 7.8 **Description** The WP JobHunt plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the `cs update application status callback` function allows authenticated attackers with Candidate-level access or higher to inject cross-site scripting into the `status` parameter of applied jobs for any user. **Recommendations** Update the WP JobHunt plugin to version 7.8 or later.

**Name of the Vulnerable Software and Affected Versions** WP JobHunt plugin for WordPress versions prior to 7.7 **Description** The WP JobHunt plugin for WordPress, used with the JobCareer theme, has a flaw that allows authorized users with Candidate- or Employer-level access, or higher, to log in even if their account is inactive or pending. This is caused by inadequate login restrictions on these account states, resulting in an authorization bypass. **Recommendations** Update to version 7.7 or later.

**Name of the Vulnerable Software and Affected Versions** WP JobHunt plugin for WordPress versions prior to 7.7 **Description** The WP JobHunt plugin for WordPress, used by the JobCareer theme, has a flaw that allows malicious code to be stored and executed when a user views an affected page. This is due to a lack of proper handling of user-supplied data. An authenticated attacker with Candidate-level access or higher can inject arbitrary web scripts through the `cs job title` parameter. This allows the attacker to execute scripts in the context of a user’s browser when they access the compromised page. **Recommendations** Update the WP JobHunt plugin to version 7.7 or later.

**Name of the Vulnerable Software and Affected Versions** WP JobHunt versions prior to 7.3 **Description** The WP JobHunt plugin for WordPress is susceptible to an Insecure Direct Object Reference issue in all versions up to and including 7.2, specifically within the `cs remove profile callback()` function. This is due to a lack of validation on a user-controlled key. Authenticated attackers with Subscriber-level access or higher can exploit this to delete accounts belonging to other users, including administrators. **Recommendations** Update WP JobHunt to version 7.3 or later.