What is the CVSS score of EUVD-2026-11810?

EUVD-2026-11810 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Jobscout are affected by EUVD-2026-11810?

Organizations using Missing Authorization vulnerability in raratheme JobScout jobscout should be aware of moderate risk from CVE-2026-32334, a missing authorization vulnerability rated CVSS 5.3.

How to fix or mitigate EUVD-2026-11810?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Jobscout EUVD-2026-11810

| CVE-2026-32334 MEDIUM

Missing Authorization (CWE-862)

2026-03-13 Patchstack

Authentication Bypass Jobscout

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 13, 2026 - 16:57 euvd

EUVD-2026-11810

Analysis Generated

Mar 13, 2026 - 16:57 vuln.today

CVE Published

Mar 13, 2026 - 11:41 nvd

MEDIUM 5.3

DescriptionCVE.org

Missing Authorization vulnerability in raratheme JobScout jobscout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobScout: from n/a through <= 1.1.7.

AnalysisAI

JobScout versions 1.1.7 and earlier contain an authorization bypass vulnerability that allows unauthenticated remote attackers to modify data through improperly configured access controls. The vulnerability enables attackers to perform unauthorized actions without proper authentication or user interaction. No patch is currently available for this vulnerability.

Technical ContextAI

This vulnerability is rooted in CWE-862 (Missing Authorization), a class of access control flaws where the application fails to enforce proper privilege checks before executing sensitive operations. The JobScout plugin, identified via CPE cpe:a:raratheme:jobscout (versions <= 1.1.7), implements WordPress functionality for job posting and management. The underlying issue stems from WordPress REST API endpoints or administrative functions within the plugin that lack proper capability checks (such as current_user_can() verification) or capability-to-action mappings. This allows attackers to bypass the intended role-based access control system, directly invoking functions that should be restricted to authenticated administrators or specific user roles.

RemediationAI

Immediately update the JobScout plugin to the latest available version (1.1.8 or later if available from raratheme) that includes authorization checks and capability verification. If a patch is not yet available, disable the plugin entirely until a fix is released, and consider using alternative job board solutions with better security track records. As a temporary mitigation, implement Web Application Firewall (WAF) rules to block suspicious requests to JobScout endpoints, enforce strict WordPress user role separation to limit administrative access, and monitor WordPress logs and audit trails for unauthorized API or admin function calls. Consult the raratheme support portal or security advisories at https://wordpress.org/plugins/jobscout/ for official patch availability and migration guidance.