CVE-2024-11712: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access of data due to a…

PriorityP430medium5.3CVSS 3.1

AVNACLPRNUINSUCLINAN

EPSS

0.45%

35.9th percentile

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getResumeFileDownloadById() function in all versions up to, and including, 2.2.2. This makes it possible for unauthenticated attackers to download other users resumes.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
wpjobportal	wp_job_portal	< 2.2.3	2.2.3
wpjobportal	wp_job_portal_ai-powered_recruitment_system_for_company_or_job_board_website	<= 2.2.2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.