WordPress Plugin Vulnerabilities | Page 128 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

wp-job-manager-companies

Published

2024-12-03

Title

WP Job Manager – Company Profiles < 1.8 - Reflected Cross-Site Scripting

Slug

wp-job-manager-resumes

Published

2024-06-21

Title

WP Job Manager - Resume Manager < 2.2.0 - Cross-Site Request Forgery

Slug

wp-job-manager-resumes

Published

2024-06-28

Title

WP Job Manager - Resume Manager < 2.2.0 - Missing Authorization

Slug

wp-job-openings

Published

2023-09-25

Title

WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing

Slug

Published

2023-03-17

Title

WP Job Portal < 2.0.6 - Subscriber+ Stored XSS

Slug

Published

2023-05-05

Title

WP Job Portal < 2.0.2 - Unauthenticated Settings Update

Slug

Published

2023-08-30

Title

WP Job Portal < 2.0.6 - Unauthenticated SQLi

Slug

Published

2023-12-29

Title

WP Job Portal < 2.0.7 - Cross-Site Request Forgery

Slug

Published

2024-06-17

Title

WP Job Portal < 2.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting

Slug

Published

2024-06-17

Title

WP Job Portal < 2.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting

Slug

Published

2024-08-12

Title

WP Job Portal < 2.1.9 - Subscriber+ Insecure Direct Object Reference

Slug

Published

2024-09-03

Title

WP Job Portal < 2.1.7 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation

Slug

Published

2024-11-11

Title

WP Job Portal < 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Slug

Published

2024-12-13

Title

WP Job Portal < 2.2.3 - Missing Authorization to Limited Privilege Escalation

Slug

Published

2024-12-13

Title

WP Job Portal < 2.2.3 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()

Slug

Published

2024-12-13

Title

WP Job Portal < 2.2.3 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()

Slug

Published

2024-12-13

Title

WP Job Portal < 2.2.3 - Unauthenticated SQL Injection

Slug

Published

2024-12-13

Title

WP Job Portal < 2.2.3 - Authenticated (Admin+) SQL Injection

Slug

Published

2024-12-13

Title

WP Job Portal < 2.2.3 - Missing Authorization to Unauthenticated Arbitrary Resume Download

Slug

Published

2025-01-02

Title

WP Job Portal – A Complete Recruitment System for Company or Job Board website < 2.2.5 - Authenticated (Subscriber+) Insecure Direct Object Reference

Slug

Published

2025-01-06

Title

WP Job Portal – A Complete Recruitment System for Company or Job Board website < 2.2.6- Authenticated (Subscriber+) Insecure Direct Object Reference

Slug

Published

2025-01-31

Title

WP Job Portal < 2.2.7 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion

Slug

Published

2025-01-31

Title

WP Job Portal < 2.2.7 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion

Slug

Published

2025-01-31

Title

WP Job Portal < 2.2.7 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion

Slug

Published

2025-01-31

Title

WP Job Portal < 2.2.7 - Missing Authorization to Unauthenticated Arbitrary Email Sending