CVE-2024-11715 is a missing authorization vulnerability in the WP Job Portal plugin for WordPress, specifically in the assignUserRole() function. Due to the absence of a capability check, unauthenticated attackers can elevate their privileges to that of an employer. This affects all versions up to and including 2.2.2. The vulnerability is categorized as CWE-862 and has a CVSS 3.1 base score of 4.8 (medium severity), with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity at a low level.

An attacker without authentication can exploit this vulnerability to gain employer-level privileges within the WP Job Portal plugin. This privilege escalation could allow unauthorized access to employer functionalities, potentially leading to unauthorized data access or modification. However, the impact is rated as medium severity with limited confidentiality and integrity impact and no availability impact. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to the plugin's functionalities or disabling the plugin if feasible to reduce exposure.