Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code when a submitted job application is viewed.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-28 | 3 | Disclosure2PoC1 |
| 2026-07-29 | 1 | Patch1 |
Simple Job Board ≤ 2.11.0 - Unauthenticated RCE (CVE-2024-1813) https://mobeta.fr/simple-job-board-unauth-rce-cve-2024-1813/
Post summary
CVE-2024-1813 is an unauthenticated RCE vulnerability in Simple Job Board versions ≤2.11.0, with a linked blog post likely providing further details and a PoC.
Simple Job Board ≤ 2.11.0 - Unauthenticated RCE (CVE-2024-1813) https://mobeta.fr/simple-job-board-unauth-rce-cve-2024-1813/
Post summary
The information announces CVE-2024-1813, an unauthenticated remote code execution vulnerability affecting Simple Job Board versions up to 2.11.0, without detailing exploits or mitigation steps.
During a web application pentest, we found unpatched instances of CVE-2024-1813 in WordPress. By chaining the underlying PHP object injection, we achieved unauthenticated RCE. https://mobeta.fr/simple-job-board-unauth-rce-cve-2024-1813/
Post summary
The text reports a pentest discovery of CVE-2024-1813 in WordPress, demonstrates unauthenticated RCE via PHP object injection, and shares a link to the proof‑of‑concept details.
ثغرة حرجة تستحق الانتباه. إصدارات Simple Job Board حتى 2.11.0 متأثرة بتنفيذ كود عن بعد دون مصادقة ضمن CVE 2024 1813. الأولوية للمراجعة والتحديث وتقليل سطح الهجوم. Critical exposure for WordPress sites using Simple Job Board. Versions ≤ 2.11.0 are affected by unauthenticated remote code execution under CVE 2024 1813. Review affected installs, patch quickly, and validate access controls. https://mobeta.fr/simple-job-board-unauth-rce-cve-2024-1813/ #WordPressSecurity #RCE #CVE20241813
Post summary
CVE‑2024‑1813 exposes Simple Job Board versions ≤2.11.0 to unauthenticated remote code execution; the post urges immediate patching and links to further details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | presstigers | simple_job_board | - | wordpress | - |