Security Advisory

CVE-2024-13771

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-14 11:15:52

Last updated 2026-04-08 16:55:12

Assigner Wordfence

State PUBLISHED

Description

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of user validation before changing a password. This makes it possible for unauthenticated attackers to change the password of arbitrary users, including administrators, if the attacker knows the username of the victim.

← Browse all CVEs View on cve.org ↗