CVE-2024-1813 is a critical PHP Object Injection vulnerability in the presstigers Simple Job Board plugin for WordPress, affecting all versions up to 2.11.0. The vulnerability arises from unsafe deserialization of untrusted input in the job_board_applicant_list_columns_value function, enabling unauthenticated attackers to inject PHP objects. Exploitation depends on the presence of a POP chain in other installed components, potentially leading to arbitrary file deletion, data disclosure, or remote code execution. The CVSS 3.1 base score is 9.8, reflecting network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to complete compromise of the affected WordPress site, including arbitrary code execution, deletion of files, and disclosure of sensitive information. The vulnerability is exploitable remotely without authentication or user interaction, making it highly severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict access to the affected plugin functionality and monitor for suspicious activity. Avoid installing untrusted plugins or themes that could provide a POP chain enabling exploitation.