CVE-2021-4352

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the save_locsettings function in versions up to, and including, 1.8.1. This makes it possible for unauthenticated attackers to change the settings of the plugin.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-284CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Jun 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-435217.5A Buffer Overflow vulnerability exists in zlog 1.2.15 via zlog_conf_build_with_file in src/zlog/src/conf.c.CVE-2021-435227.5An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StoragCVE-2021-435239.6In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, gCVE-2021-435279.8NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-CVE-2021-435286.5Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not rCVE-2021-435299.8Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. ThundeCVE-2021-43535.3The WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to unauthenticated settings export in versions up to, and iCVE-2021-435306.1A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QCVE-2021-435314.3When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web ExCVE-2021-435326.1The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authenticatioCVE-2021-435334.3When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies tCVE-2021-435348.8Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed e
CVE-2021-4352: Medium severity, CVSS 5.3 | Vulnix