{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-19T04:26:09.162","vulnerabilities":[{"cve":{"id":"CVE-2024-13371","sourceIdentifier":"security@wordfence.com","published":"2025-02-01T08:15:08.567","lastModified":"2025-02-05T16:16:22.397","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker() function in all versions up to, and including, 2.2.6. This makes it possible for unauthenticated attackers to send arbitrary emails with arbitrary content from the sites mail server."},{"lang":"es","value":"El complemento WP Job Portal – A Complete Recruitment System for Company or Job Board website para WordPress es vulnerable al envío de correos electrónicos arbitrarios no autorizados debido a una verificación de capacidad faltante en la función sendEmailToJobSeeker() en todas las versiones hasta la 2.2.6 y incluida. Esto permite que atacantes no autenticados envíen correos electrónicos arbitrarios con contenido arbitrario desde el servidor de correo del sitio."}],"metrics":{"cvssMetricV31":[{"source":"security@wordfence.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"security@wordfence.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wpjobportal:wp_job_portal:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.2.7","matchCriteriaId":"2B60A620-1CDA-4081-830E-9CBCE75F10E3"}]}]}],"references":[{"url":"https://gist.github.com/g1-nhantv/31b04bc057046ecc54c3552387eb7bca","source":"security@wordfence.com","tags":["Product"]},{"url":"https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/jobapply/model.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fjobapply%2Fmodel.php","source":"security@wordfence.com","tags":["Patch"]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a84a4c56-a44e-450d-91fc-024f8ddeedee?source=cve","source":"security@wordfence.com","tags":["Third Party Advisory"]}]}}]}