Automattic Wp Job Manager - Resume Manager vulnerabilities

2 CVEs affecting Automattic Wp Job Manager - Resume Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-37241, published 2025-01-02.

More from Automattic.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-37443, published 2024-11-01. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Missing Authorization vulnerability in Automattic WP Job Manager - Resume Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager - Resume…
• CVE-2024-37241, published 2025-01-02. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager - Resume Manager allows Cross Site Request Forgery.This issue affects WP Job Manager - Resume Manager: from n/a through…