Access violation vulnerability in WP Job Portal – A Complete Recruitment System for Company or Job Board website 2.2.6

The WP Job Portal is a plugin for WordPress that helps with recruitment for company or job board websites. However, it has a security vulnerability called Insecure Direct Object Reference, which affects all versions up to 2.2.6. This vulnerability allows attackers, who have Employer-level access or higher, to delete other users’ companies by exploiting the enforcedelete() function which does not properly validate user-controlled keys.