CVE-2024-0593

MEDIUM NUCLEI

Simple Job Board <2.10.8 - Info Disclosure

Title source: llm

Description

The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.

Nuclei Templates (1)

WordPress Simple Job Board - Unauthorized Data Access

MEDIUMVERIFIEDby zer0p0int

FOFA: body="/wp-content/plugins/simple-job-board"

References (2)

[Patch] https://plugins.trac.wordpress.org/changeset/3038476/simple-job-board/trunk/includes/class-simple-job-board-ajax.php

[Third Party Advisory] https://www.wordfence.com/threat-intel/vulnerabilities/id/0a28a161-3dbc-4ef0-a2ce-4c102cf3cbb0?source=cve

Scores

CVSS v3 5.3

EPSS 0.0669

EPSS Percentile 91.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-862

Status published

Products (2)

presstigers/Simple Job Board < 2.10.8

presstigers/simple_job_board < 2.11.0

Published Feb 21, 2024

Tracked Since Feb 18, 2026