CVE-2024-7351

CVE-2024-7351 is a PHP Object Injection vulnerability affecting the Simple Job Board plugin for WordPress, versions up to and including 2.12.3. This flaw allows authenticated attackers with Editor-level access or higher to inject a PHP Object during job application editing. While no POP chain is present in the plugin itself, a successful exploit could lead to arbitrary file deletion, sensitive data retrieval, or code execution if a POP chain exists in other installed plugins or themes. The vulnerability has a CVSS score of 7.2 (High), indicating a high potential impact on confidentiality, integrity, and availability. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.