The Grand Job (<= 1.2.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/the-grand-job--1.2.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 15:51:08 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgThe Grand Job WordPress plugin: Authentication bypass via password reset (CVE-2026-115237)https://feed.craftedsignal.io/briefs/2026-11-grand-job-bypass/Mon, 09 Nov 2026 15:51:08 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-grand-job-bypass/The Grand Job WordPress plugin through 1.2.1 contains an authentication bypass vulnerability allowing unauthenticated attackers to reset the passwords of arbitrary users, including administrators.The Grand Job WordPress plugin (versions 1.2.1 and earlier) fails to properly validate password reset codes during the password reset process. This flaw allows unauthenticated remote attackers to update the passwords of arbitrary user accounts, including those with administrative privileges, leading to full site takeover.

Impact

Successful exploitation allows for full site compromise by granting the attacker administrative control over the affected WordPress installation.

Recommendation

  • Inventory all WordPress instances utilizing "The Grand Job" plugin.
  • Disable or remove the plugin until a patch is released by the developer.
  • Audit administrative user account logs for unexpected password changes occurring since the discovery of this vulnerability.
]]>criticaladvisorywordpressauthentication-bypasscve