CyberRota Analysis
AI-GeneratedThe WP Job Portal plugin for WordPress prior to version 2.5.5 is vulnerable due to a lack of capability and ownership checks, enabling authenticated users with subscriber-level accounts to manipulate job postings, including approving or rejecting jobs owned by others. This could lead to unauthorized job modifications and potential misinformation on job listings. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to approve, feature, or reject arbitrary jobs, including those owned by other users.