From b3a7bf2fffe10b555a82d6270e2740bebf1c3e6a Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sat, 24 Aug 2024 09:32:07 +0000
Subject: [PATCH] Publish GHSA-w44v-435x-5pw4

---
 .../GHSA-w44v-435x-5pw4.json                  | 42 +++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 advisories/unreviewed/2024/08/GHSA-w44v-435x-5pw4/GHSA-w44v-435x-5pw4.json

diff --git a/advisories/unreviewed/2024/08/GHSA-w44v-435x-5pw4/GHSA-w44v-435x-5pw4.json b/advisories/unreviewed/2024/08/GHSA-w44v-435x-5pw4/GHSA-w44v-435x-5pw4.json
new file mode 100644
index 00000000000..bd977d001e8
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-w44v-435x-5pw4/GHSA-w44v-435x-5pw4.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w44v-435x-5pw4",
+  "modified": "2024-08-24T09:30:29Z",
+  "published": "2024-08-24T09:30:29Z",
+  "aliases": [
+    "CVE-2024-7351"
+  ],
+  "details": "The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7351"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3138348%40simple-job-board%2Ftrunk&old=3113171%40simple-job-board%2Ftrunk&sfp_email=&sfph_mail=#file12"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ba6312b9-1b66-4b4f-a78d-515fa4aab63b?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-24T08:15:04Z"
+  }
+}
\ No newline at end of file