Vulnerabilities (CVE)

Filtered by vendor Hmplugin Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-48288 1 Hmplugin 1 Jobwp 2023-12-29 N/A 7.5 HIGH
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.1.
CVE-2021-24602 1 Hmplugin 1 Hm Multiple Roles 2021-08-27 6.5 MEDIUM 8.8 HIGH
The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page