Vulnerabilities:

11

Last Updated:

n/a

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-12-20
Title
WP JobHunt <= 7.7 - Missing Authorization to Authenticated (Candidate+) Stored Cross-Site Scripting via 'status'
Fixed in
No known fix
CVSS
7.6 (high)
Published
2025-12-20
Title
WP JobHunt <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-10-09
Title
WP JobHunt < 7.7 - Authenticated (Candidate+) Stored Cross-Site Scripting via ‘cs_job_title’
Fixed in
Fixed in 7.7
CVSS
6.4 (medium)
Published
2025-10-09
Title
WP JobHunt < 7.7 Authenticated (Custom+) Authorization Bypass
Fixed in
Fixed in 7.7
CVSS
5.4 (medium)
Published
2025-07-21
Title
WP JobHunt <= 7.2 - Subscriber+ Arbitrary Account Deletion via IDOR
Fixed in
No known fix
CVSS
8.1 (high)
Published
2025-05-16
Title
WP JobHunt <= 7.1 - Unauthenticated Insecure Direct Object Reference
Fixed in
No known fix
CVSS
7.5 (high)
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Authentication Bypass
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Authentication Bypass to Candidate
Fixed in
No known fix
CVSS
7.5 (high)
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2018-12-04
Title
JobCareer < 2.4.1 - User enumeration & Reset password
Fixed in
Fixed in 2.4
CVSS
9.8 (critical)