CPE
The Grand Job WordPress plugin through 1.2.1 contains an authentication bypass vulnerability allowing unauthenticated attackers to reset the passwords of arbitrary users, including administrators.