Sfwebservice

sfwebservice

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Injob

injob

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-1315 1Sfwebservice 1Injob Jun 17, 2026 Mar 7, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to upda...Show more The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2025-1315

1Sfwebservice

1Injob

Jun 17, 2026

Mar 7, 2025

N/A· v4

9.8 CRITICAL· v3

N/A· v2

The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.Show less