Plugin icon

WP JobSearch

wp-jobsearch

Vulnerabilities:

26

Last Updated:

February 18, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-03-23
Title
JobSearch WP Job Board < 3.2.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.2.2
CVSS
6.1 (medium)
Published
2025-10-03
Title
JobSearch < 3.0.8 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 3.0.8
CVSS
8.1 (high)
Published
2025-08-14
Title
JobSearch < 3.0.8 - Authenticated (Subscriber+) Local File Inclusion
Fixed in
Fixed in 3.0.8
CVSS
7.5 (high)
Published
2025-06-26
Title
JobSearch < 3.0.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.0.6
CVSS
7.1 (high)
Published
2025-06-19
Title
JobSearch < 3.0.6 - Subscriber+ Insecure Direct Object Reference
Fixed in
Fixed in 3.0.6
CVSS
4.3 (medium)
Published
2025-04-24
Title
JobSearch WP Job Board <= 2.9.2 - Authentication Bypass via Social Logins
Fixed in
No known fix
CVSS
8.1 (high)
Published
2024-11-27
Title
WP JobSearch < 2.6.8 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 2.6.8
CVSS
9.8 (critical)
Published
2024-11-05
Title
WP JobSearch < 2.6.8 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 2.6.8
CVSS
9.9 (critical)
Published
2024-11-05
Title
WP JobSearch < 2.6.8 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 2.6.8
CVSS
10 (critical)
Published
2024-09-30
Title
JobSearch < 2.6.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.6.1
CVSS
6.1 (medium)
Published
2024-09-30
Title
JobSearch < 2.6.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 2.6.1
CVSS
9.8 (critical)
Published
2024-08-26
Title
JobSearch < 2.5.4 - Cross-Site Request Forgery
Fixed in
Fixed in 2.5.4
CVSS
4.3 (medium)
Published
2024-08-26
Title
JobSearch < 2.5.4 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 2.5.4
CVSS
10 (critical)
Published
2024-08-26
Title
JobSearch < 2.5.6 - Missing Authorization
Fixed in
Fixed in 2.5.6
CVSS
5.3 (medium)
Published
2024-08-26
Title
JobSearch < 2.5.6 - Missing Authorization
Fixed in
Fixed in 2.5.6
CVSS
4.3 (medium)
Published
2024-08-12
Title
JobSearch <= 2.3.4 - Authentication Bypass to Account Takeover
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2023-11-24
Title
JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE
Fixed in
Fixed in 2.3.4
CVSS
10.0 (critical)
Published
2023-11-24
Title
JobSearch WP Job Board < 2.3.4 - Authentication Bypass
Fixed in
Fixed in 2.3.4
CVSS
9.8 (critical)
Published
2021-10-05
Title
JobSearch WP Job Board < 1.8.2 - Unauthenticated Plugin's Settings Update
Fixed in
Fixed in 1.8.2
CVSS
5.3 (medium)
Published
2021-10-05
Title
JobSearch WP Job Board < 1.8.2 - Subscriber+ Arbitrary Blog Options Update
Fixed in
Fixed in 1.8.2
CVSS
8.8 (high)
Published
2021-10-05
Title
JobSearch WP Job Board < 1.8.2 - Subscriber+ Add/Update Schedule Calls
Fixed in
Fixed in 1.8.2
CVSS
4.3 (medium)
Published
2021-06-16
Title
WP JobSearch < 1.7.4 - Authenticated Stored XSS
Fixed in
Fixed in 1.7.4
CVSS
5.4 (medium)
Published
2020-07-24
Title
JobSearch < 1.5.6 - Unauthenticated Reflected XSS
Fixed in
Fixed in 1.5.6
CVSS
6.1 (medium)
Published
2020-07-18
Title
JobSearch < 1.5.5 - Unauthenticated Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.5
CVSS
6.1 (medium)
Published
2020-07-05
Title
JobSearch < 1.5.3 - Multiple Cross-Site Scripting Issues
Fixed in
Fixed in 1.5.3
CVSS
6.1 (medium)
Published
2020-06-03
Title
JobSearch < 1.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.5.1
CVSS
8.8 (high)