WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jobboardwp
Published
2021-10-15
Title
JobBoardWP < 1.1.0 - Admin+ Stored Cross-Site Scripting
Slug
jobboardwp
Published
2022-11-28
Title
JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
Slug
jobboardwp
Published
2024-11-22
Title
JobBoardWP – Job Board Listings and Submissions < 1.3.1 - Reflected Cross-Site Scripting
Slug
jobcareer
Published
2025-03-13
Title
JobCareer | Job Board Responsive WordPress Theme <= 7.1 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrative Actions
Slug
jobhunt-notifications
Published
2025-05-23
Title
JobHunt Job Alerts <= 3.6 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Slug
jobica-core
Published
2026-03-16
Title
Jobica Core <= 1.4.2 - Missing Authorization
Slug
jobica-core
Published
2026-03-16
Title
Jobica Core < 1.4.2 - Authenticated (Subscriber+) PHP Object Injection
Slug
jobica-core
Published
2026-03-16
Title
Jobica Core < 1.4.2 - Reflected Cross-Site Scripting
Slug
jobify
Published
2025-09-10
Title
Jobify <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via keyword Parameter
Slug
jobmonster-addon
Published
2025-12-12
Title
Jobmonster Elementor Addon < 1.1.5 - Authenticated (Contributor+) Local File Inclusion
Slug
jobwp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
jobwp
Published
2023-11-23
Title
WordPress Job Board and Recruitment Plugin – JobWP < 2.2 - Sensitive Information Exposure
Slug
jobwp
Published
2025-04-18
Title
JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin < 2.4.0 - Unauthenticated SQL Injection
Slug
jobwp
Published
2025-04-04
Title
JobWP < 2.4.0 - Cross-Site Request Forgery
Slug
jobwp
Published
2025-06-19
Title
JobWP < 2.4.1 - Cross-Site Request Forgery
Slug
jobwp
Published
2025-08-22
Title
JobWP < 2.4.4 - Cross-Site Request Forgery
Slug
jobwp
Published
2026-01-21
Title
JobWP < 2.4.6 - Unauthenticated Stored Cross-Site Scripting
Slug
joli-clear-lightbox
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
joli-clear-lightbox
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
joli-faq-seo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
joli-faq-seo
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
joli-faq-seo
Published
2024-05-07
Title
Joli FAQ SEO – WordPress FAQ Plugin < 1.3.3 - Cross-Site Request Forgery
Slug
joli-table-of-contents
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
joli-table-of-contents
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
joli-table-of-contents
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter