WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jnews-frontend-submit
Published
2026-01-12
Title
JNews - Frontend Submit <= 11.0.0 - Reflected Cross-Site Scripting
Slug
jnews-gallery
Published
2025-12-06
Title
JNews Gallery < 12.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jnews-pay-writer
Published
2026-01-13
Title
JNews - Pay Writer <= 11.0.0 - Authenticated (Subscriber+) Local File Inclusion
Slug
jnews-paywall
Published
2025-12-06
Title
JNews Paywall < 12.0.1 - Cross-Site Request Forgery
Slug
jnews-video
Published
2026-01-13
Title
JNews - Video <= 11.0.2 - Reflected Cross-Site Scripting
Slug
joan
Published
2021-08-18
Title
Jock on air now < 5.6.3 - Authenticated Stored Cross-Site Scripting
Slug
joan
Published
2021-08-18
Title
Jock on air now < 5.6.2 - Reflected Cross-Site Scripting
Slug
joan
Published
2021-08-18
Title
Jock on air now < 5.6.2 - Arbitrary Plugin's Settings Update via CSRF
Slug
joan
Published
2025-10-02
Title
Jock On Air Now (JOAN) < 6.0.5 - Missing Authorization
Slug
job-board
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
job-board
Published
2014-08-08
Title
Job Board by BestWebSoft < 1.0.1 - Admin+ Stored XSS
Slug
job-board
Published
2025-11-24
Title
Job Board by BestWebSoft < 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting via $_GET Array Storage
Slug
job-board-light
Published
2025-01-03
Title
JobBoard Job listing < 1.2.7 - Unauthenticated Arbitrary File Upload
Slug
job-board-light
Published
2025-04-01
Title
JobBoard Job listing <= 1.2.7 - Missing Authorization
Slug
job-board-light
Published
2025-04-01
Title
JobBoard Job listing <= 1.2.7 - Authenticated (Employer+) Insecure Direct Object Reference
Slug
job-board-light
Published
2026-01-27
Title
JobBoard Job listing <= 1.2.8 - Unauthenticated Information Exposure
Slug
job-board-manager
Published
2024-07-11
Title
Job Board Manager < 2.1.59 - Subscriber+ Stored XSS
Slug
job-board-manager
Published
2024-12-14
Title
Job Board Manager <= 2.1.60 - Missing Authorization
Slug
job-board-manager
Published
2025-01-24
Title
Job Board Manager < 2.1.60 - Cross-Site Request Forgery
Slug
job-board-manager
Published
2025-02-03
Title
Job Board Manager <= 2.1.60 - Reflected Cross-Site Scripting
Slug
job-board-manager
Published
2025-04-01
Title
Job Board Manager <= 2.1.60 - Missing Authorization
Slug
job-board-manager
Published
2025-04-09
Title
Job Board Manager <= 2.1.60 - Authenticated (Contributor+) PHP Object Injection
Slug
job-board-manager
Published
2025-06-05
Title
Job Board Manager < 2.1.61 - Missing Authorization
Slug
job-board-manager
Published
2025-09-05
Title
Job Board Manager <= 2.1.61 - Authenticated (Job Poster+) Arbitrary Shortcode Execution
Slug
job-board-manager
Published
2025-09-26
Title
Job Board Manager <= 2.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting