CVE-2025-3918

Description

The Job Listings plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization within the register_action() function in versions 0.1 to 0.1.1. The plugin’s registration handler reads the client-supplied $_POST['user_role'] and passes it directly to wp_insert_user() without restricting to a safe set of roles. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

Reserved 2025-04-24 | Published 2025-05-03 | Updated 2025-05-06 | Assigner Wordfence

Problem types

CWE-285 Improper Authorization

Product status

Default status
unaffected

0.1
affected

Timeline

2025-05-02:

Disclosed

Credits

Kenneth Dunn finder

References

www.wordfence.com/...-c3d0-4eb2-9c18-1af2edca37ff?source=cve

plugins.trac.wordpress.org/...orms/class-jlt-form-member.php

wordpress.org/plugins/job-listings/

cve.org (CVE-2025-3918)

nvd.nist.gov (CVE-2025-3918)

Download JSON