WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-job-board
Published
2017-04-19
Title
Simple Job Board <= 2.4.3 - Reflected XSS
Slug
simple-job-board
Published
2021-01-15
Title
Simple Job Board < 2.9.4 - Authenticated Path Traversal Leading to Arbitrary File Download
Slug
simple-job-board
Published
2021-10-21
Title
Simple Job Board < 2.9.5 - Admin+ Stored Cross-Site Scripting
Slug
simple-job-board
Published
2022-08-01
Title
Simple Job Board < 2.10.0 - Resume Disclosure via Directory Listing
Slug
simple-job-board
Published
2023-04-07
Title
Simple Job Board < 2.10.4 - Settings Update via CSRF
Slug
simple-job-board
Published
2023-12-28
Title
Simple Job Board < 2.10.7 - Cross-Site Request Forgery
Slug
simple-job-board
Published
2023-11-03
Title
Simple Job Board < 2.10.6 - Missing Authorization
Slug
simple-job-board
Published
2024-02-20
Title
Simple Job Board < 2.11.0 - Missing Authorization to Unauthenticated Information Disclosure
Slug
simple-job-board
Published
2024-03-15
Title
Simple Job Board < 2.11.1 - Unauthenticated PHP Object Injection via Job Application Fields
Slug
simple-job-board
Published
2024-07-04
Title
Simple Job Board < 2.12.2 - Admin+ Stored XSS
Slug
simple-job-board
Published
2024-08-23
Title
Simple Job Board < 2.12.4 - Authenticated (Editor+) PHP Object Injection
Slug
simple-job-board
Published
2024-07-04
Title
Simple Job Board < 2.12.6 - Unauthenticated Resumes Download
Slug
simple-job-board
Published
2025-10-14
Title
Simple Job Board < 2.13.8 - Unauthenticated Sensitive Information Exposure
Slug
simple-job-manager
Published
2024-10-31
Title
Simple Job Manager <= 1.1 - Authenticated (Contributor+) SQL Injection
Slug
simple-jwt-login
Published
2021-10-13
Title
Simple JWT Login < 3.3.0 - Insecure Password Creation
Slug
simple-jwt-login
Published
2021-10-18
Title
Simple JWT Login < 3.2.1 - Arbitrary Settings Update to Site Takeover via CSRF
Slug
simple-jwt-login
Published
2025-09-22
Title
Simple JWT Login <= 3.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-keyword-to-link
Published
2025-06-05
Title
Simple Keyword to Link <= 1.5 - Cross-Site Request Forgery
Slug
simple-keyword-to-link
Published
2025-12-17
Title
Simple Keyword to Link <= 1.5 - Cross-Site Request Forgery
Slug
simple-ldap-login
Published
2024-09-27
Title
Simple LDAP Login < 1.6.1 - Reflected Cross-Site Scripting
Slug
simple-lightbox
Published
2025-04-25
Title
Simple Lightbox < 2.9.4 - Contributor+ Stored XSS
Slug
simple-lightbox-gallery
Published
2024-03-28
Title
Lightbox slider – Responsive Lightbox Gallery < 1.10.0 - Contributor+ PHP Object Injection
Slug
simple-lightbox-gallery
Published
2024-10-15
Title
Lightbox slider – Responsive Lightbox Gallery <= 1.10.5 - Author+ Stored XSS
Slug
simple-link-directory
Published
2018-11-11
Title
Simple Link Directory < 5.6.0 - Authenticated PHP Object Injection
Slug
simple-link-directory
Published
2019-07-09
Title
Simple Link Directory < 7.3.5 - Cross-Site Scripting (XSS)