Authentication vulnerability in InWave Jobs 3.5.1

A plugin for WordPress called InWave Jobs has a security issue that allows someone to gain more access than they should. This happens when someone tries to reset their password and the plugin doesn’t check if they are really who they say they are. This means that someone who isn’t logged in can change the passwords of any user, even the main administrator, and use that to get into their account.