Description
WordPress Plugin WP Job Manager is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions; other attacks are also possible. WordPress Plugin WP Job Manager version 1.34.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.34.4 or latest
References
https://wpdeeply.com/wordpress-protected-meta-via-wp-job-manager/
https://plugins.svn.wordpress.org/wp-job-manager/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin MailPoet Newsletters (Previous) Cross-Site Request Forgery (2.6.10)
MySQL CVE-2018-3279 Vulnerability (CVE-2018-3279)
WordPress Plugin WP Easy full backup Information Disclosure (1.4)
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (3.8.9)
WordPress Plugin Accept Stripe Donation-AidWP Cross-Site Request Forgery (3.1.5)