The Job Listings plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization within the register_action() function in versions 0.1 to 0.1.1. The plugin’s registration handler reads the client-supplied $_POST['user_role'] and passes it directly to wp_insert_user() without restricting to a safe set of roles. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
#TIPS

Infosec's favorite weekly newsletter for news, tools, and tips with 18,000+ CISOs, founders, change-makers, and straight up hackers.

Useful online security tips and articles. True cyber security combines advanced technology and best practice. Get tips and read articles on how to take your online security even further.

Aura's team of experts are here to guide you on topics like identity theft, credit & finance, fraud prevention, internet safety & digital security.

CISA provides information on cybersecurity best practices to help individuals and organizations implement preventative measures and manage cyber risks.

Read our expert tips and advice to help protect yourself from identity theft. Learn about data breaches, fraud, credit, and internet security from the pros at LifeLock by Norton.

TIPS & GUIDANCE Ransomware incidents can severely impact business processes and leave organizations without the data they need to operate and deliver.