This vulnerability in themeglow's JobBoard Job listing plugin allows an attacker with high privileges to bypass authorization controls by manipulating a user-controlled key due to misconfigured access control security levels. It affects versions up to and including 1.2.8. The issue does not impact confidentiality or availability but can lead to integrity violations. The CVSS score of 4.9 reflects a medium severity with network attack vector, low attack complexity, and no user interaction required.

The vulnerability enables an attacker with existing high privileges to bypass authorization mechanisms, potentially allowing unauthorized modification or manipulation of job listings or related data. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — no official patch or remediation guidance is currently available from the vendor. Users should monitor the vendor's advisory channels for updates and apply any official fixes once released. Until then, restrict high privilege accounts to trusted users only and review access control configurations to minimize risk.