https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 16:35:36 +0000 https://cve.radiocsirt.org/vuln/cve-2024-13771 <p><strong>Affected:</strong> uxper Civi - Job Board &amp; Freelance Marketplace WordPress Theme</p> <p>The Civi - Job Board &amp; Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of user validation before changing a password. This makes it possible for unauthenticated attackers to change the password of arbitrary users, including administrators, if the attacker knows the username of the victim.</p> <p><strong>Affected:</strong> uxper Civi - Job Board &amp; Freelance Marketplace WordPress Theme</p> <p>The Civi - Job Board &amp; Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of user validation before changing a password. This makes it possible for unauthenticated attackers to change the password of arbitrary users, including administrators, if the attacker knows the username of the victim.</p> https://cve.radiocsirt.org/vuln/cve-2024-13771