{"data":{"id":"2c40e793-4c34-4938-87de-a77755b0f355","title":"CVE-2024-13698: The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and modification of data due…","summary":"CVE-2024-13698 affects the Jobify - Job Board WordPress Theme in all versions up to and including 4.2.7. A missing capability check (CWE-862) on the 'download_image_via_ai' and 'generate_image_via_ai' functions lets unauthenticated attackers make web requests to arbitrary locations from the application, upload image-format files, and generate AI images using the site's OpenAI key.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-13698","publishedAt":"2025-01-24T21:15:34.597Z","cveId":"CVE-2024-13698","cweIds":["CWE-862"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI","AI image generation feature"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Jobify WordPress Theme missing capability check in AI image functions","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00334,"epssCheckedAt":"2026-11-04T06:10:13.536Z","kevDateAdded":null,"advisoryAliases":["GHSA-6p72-9rwx-x4v5"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:53.640Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[]}}