JW
Product
JobSearch WP Job Board
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 4Low 0
Watch
Add JobSearch WP Job Board to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-11925 | 9.8 | Nov 28 | WP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation Affected: through 2.6.7 |
| CVE-2024-8615 | 9.8 | Nov 6 | WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload Affected: through 2.6.7 |
| CVE-2024-43929 | 9.8 | Nov 1 | WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability Affected: before 2.5.6 |
| CVE-2024-47636 | 9.8 | Oct 10 | WordPress WP JobSearch plugin <= 2.5.9 - PHP Object Injection vulnerability Affected: through 2.5.9 |
| CVE-2024-43931 | 9.8 | Aug 29 | WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability Affected: before 2.5.4 |
| CVE-2024-43245 | 9.8 | Aug 19 | WordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability Affected: through 2.3.4 |
| CVE-2024-8614 | 8.8 | Nov 6 | WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload Affected: through 2.6.7 |
| CVE-2024-43928 | 8.8 | Nov 1 | WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability Affected: before 2.5.6 |
| CVE-2021-4361 | 8.8 | Jun 7 | The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_job_integrations_settin_save AJAX action… Affected: through 1.8.1 |
| CVE-2024-11917 | 8.1 | Apr 25 | JobSearch WP Job Board <= 2.9.2 - Authentication Bypass via Social Logins Affected: through 2.9.2 |
| CVE-2023-6585 | 7.5 | Feb 27 | The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the… Affected: before 2.3.4 |
| CVE-2023-6584 | 7.5 | Feb 27 | The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address Affected: before 2.3.4 |
| CVE-2022-1168 | 6.1 | Apr 4 | There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1 Affected: before 1.5.1 |
| CVE-2021-24421 | 5.4 | Jul 12 | The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low… Affected: before 1.7.4 |
| CVE-2021-4352 | 5.3 | Jun 7 | The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the save_locsettings function in versions up to, and… Affected: through 1.8.1 |
| CVE-2021-4364 | 4.3 | Jun 7 | The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_add_job_import_schedule_call() function in… Affected: through 1.8.1 |
Showing 16