WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-job-board-pro
Published
2025-02-11
Title
WP Job Board Pro <= 1.2.76 - Unauthenticated Privilege Escalation
Slug
wp-job-manager
Published
2015-08-13
Title
WP Job Manager < 1.23.8 - Reflected Cross-Site Scripting (XSS)
Slug
wp-job-manager
Published
2016-07-11
Title
WP Job Manager < 1.26.2 - Unauthenticated Arbitrary File Upload
Slug
wp-job-manager
Published
2018-03-02
Title
WP Job Manager < 1.29.3 - Unauthenticated Object Injection
Slug
wp-job-manager
Published
2018-12-22
Title
WP Job Manager < 1.31.3 - Phar Deserialization
Slug
wp-job-manager
Published
2024-01-05
Title
WP Job Manager < 2.1.0 - Unauthenticated Job Status Update
Slug
wp-job-manager
Published
2024-01-05
Title
WP Job Manager < 2.1.0 - Cross-Site Request Forgery
Slug
wp-job-manager
Published
2024-05-07
Title
WP Job Manager < 2.3.0 - Unauthenticated Information Exposure
Slug
wp-job-manager-colors
Published
2025-03-27
Title
Job Colors for WP Job Manager <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-job-manager-companies
Published
2024-12-03
Title
WP Job Manager – Company Profiles < 1.8 - Reflected Cross-Site Scripting
Slug
wp-job-manager-resumes
Published
2024-06-21
Title
WP Job Manager - Resume Manager < 2.2.0 - Cross-Site Request Forgery
Slug
wp-job-manager-resumes
Published
2024-06-28
Title
WP Job Manager - Resume Manager < 2.2.0 - Missing Authorization
Slug
wp-job-openings
Published
2023-09-25
Title
WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing
Slug
wp-job-portal
Published
2023-03-17
Title
WP Job Portal < 2.0.6 - Subscriber+ Stored XSS
Slug
wp-job-portal
Published
2023-05-05
Title
WP Job Portal < 2.0.2 - Unauthenticated Settings Update
Slug
wp-job-portal
Published
2023-08-30
Title
WP Job Portal < 2.0.6 - Unauthenticated SQLi
Slug
wp-job-portal
Published
2023-12-29
Title
WP Job Portal < 2.0.7 - Cross-Site Request Forgery
Slug
wp-job-portal
Published
2024-06-17
Title
WP Job Portal < 2.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-job-portal
Published
2024-06-17
Title
WP Job Portal < 2.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-job-portal
Published
2024-08-12
Title
WP Job Portal < 2.1.9 - Subscriber+ Insecure Direct Object Reference
Slug
wp-job-portal
Published
2024-09-03
Title
WP Job Portal < 2.1.7 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation
Slug
wp-job-portal
Published
2024-11-11
Title
WP Job Portal < 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-job-portal
Published
2024-12-13
Title
WP Job Portal < 2.2.3 - Missing Authorization to Limited Privilege Escalation
Slug
wp-job-portal
Published
2024-12-13
Title
WP Job Portal < 2.2.3 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()
Slug
wp-job-portal
Published
2024-12-13
Title
WP Job Portal < 2.2.3 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()