This vulnerability involves missing authorization in the PickPlugins Job Board Manager plugin, affecting versions up to 2.1.61. The issue arises from incorrectly configured access control security levels, enabling unauthorized actions that impact data integrity. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact present. No patch or official remediation guidance is currently provided.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions that affect the integrity of the Job Board Manager data or functionality. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to limit exposure. Monitor vendor channels for updates and apply patches promptly once available.