Input validation vulnerability in JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin 2.3.9

The JobWP plugin for WordPress, which helps with job listings and recruitment, has a security vulnerability. This vulnerability, called Cross-Site Request Forgery, affects all versions up to 2.3.9. The issue is that the plugin does not properly check for a security code, called a nonce, when a certain function is used. As a result, someone who is not logged in or authorized could trick a site administrator into taking an action, like clicking a link, without their permission.