WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-job-portal
Published
2025-01-06
Title
WP Job Portal – A Complete Recruitment System for Company or Job Board website < 2.2.6- Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
wp-job-portal
Published
2025-01-31
Title
WP Job Portal < 2.2.7 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion
Slug
wp-job-portal
Published
2025-01-31
Title
WP Job Portal < 2.2.7 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion
Slug
wp-job-portal
Published
2025-01-31
Title
WP Job Portal < 2.2.7 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion
Slug
wp-job-portal
Published
2025-01-31
Title
WP Job Portal < 2.2.7 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Slug
wp-job-portal
Published
2025-01-31
Title
WP Job Portal < 2.2.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download
Slug
wp-job-portal
Published
2025-02-21
Title
WP Job Portal < 2.2.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection
Slug
wp-job-portal
Published
2025-02-23
Title
WP Job Portal < 2.2.9 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-job-portal
Published
2025-05-08
Title
WP Job Portal < 2.3.2 - Unauthenticated Local File Inclusion
Slug
wp-job-portal
Published
2025-05-19
Title
WP Job Portal < 2.3.3 - Unauthenticated Insecure Direct Object Reference
Slug
wp-job-portal
Published
2025-05-24
Title
WP Job Portal < 2.3.3 - Unauthenticated Arbitrary File Download
Slug
wp-job-portal
Published
2025-06-11
Title
WP Job Portal < 2.3.3 - Unauthenticated SQL Injection
Slug
wp-job-portal
Published
2025-12-11
Title
WP Job Portal < 2.4.1 - Authenticated (Subscriber+) Arbitrary File Read
Slug
wp-job-portal
Published
2025-12-11
Title
WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field
Slug
wp-job-portal
Published
2026-01-24
Title
Job Portal < 2.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
wp-job-portal
Published
2026-02-03
Title
WP Job Portal < 2.4.5 - Missing Authorization
Slug
wp-job-portal
Published
2026-03-23
Title
WP Job Portal < 2.4.9 - Unauthenticated SQL Injection via 'radius' Parameter
Slug
wp-job-portal
Published
2026-03-25
Title
WP Job Portal < 2.5.0 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field
Slug
wp-jobhunt
Published
2018-12-04
Title
JobCareer < 2.4.1 - User enumeration & Reset password
Slug
wp-jobhunt
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover
Slug
wp-jobhunt
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
Slug
wp-jobhunt
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Authentication Bypass
Slug
wp-jobhunt
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Authentication Bypass to Candidate
Slug
wp-jobhunt
Published
2025-05-16
Title
WP JobHunt <= 7.1 - Unauthenticated Insecure Direct Object Reference
Slug
wp-jobhunt
Published
2025-07-21
Title
WP JobHunt <= 7.2 - Subscriber+ Arbitrary Account Deletion via IDOR