WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-jobhunt
Published
2025-10-09
Title
WP JobHunt < 7.7 - Authenticated (Candidate+) Stored Cross-Site Scripting via ‘cs_job_title’
Slug
wp-jobhunt
Published
2025-10-09
Title
WP JobHunt < 7.7 Authenticated (Custom+) Authorization Bypass
Slug
wp-jobhunt
Published
2025-12-20
Title
WP JobHunt <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference
Slug
wp-jobhunt
Published
2025-12-20
Title
WP JobHunt <= 7.7 - Missing Authorization to Authenticated (Candidate+) Stored Cross-Site Scripting via 'status'
Slug
wp-jobs
Published
2017-06-11
Title
WP Jobs <= 1.4 - Authenticated SQL Injection
Slug
wp-jobs
Published
2017-09-26
Title
WP Jobs < 1.7 - XSS
Slug
wp-jobs2careers
Published
2025-08-01
Title
WP Talroo <= 2.4 - Reflected XSS
Slug
wp-jobsearch
Published
2020-06-03
Title
JobSearch < 1.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-jobsearch
Published
2020-07-05
Title
JobSearch < 1.5.3 - Multiple Cross-Site Scripting Issues
Slug
wp-jobsearch
Published
2020-07-18
Title
JobSearch < 1.5.5 - Unauthenticated Reflected Cross-Site Scripting
Slug
wp-jobsearch
Published
2020-07-24
Title
JobSearch < 1.5.6 - Unauthenticated Reflected XSS
Slug
wp-jobsearch
Published
2021-06-16
Title
WP JobSearch < 1.7.4 - Authenticated Stored XSS
Slug
wp-jobsearch
Published
2021-10-05
Title
JobSearch WP Job Board < 1.8.2 - Subscriber+ Arbitrary Blog Options Update
Slug
wp-jobsearch
Published
2021-10-05
Title
JobSearch WP Job Board < 1.8.2 - Unauthenticated Plugin's Settings Update
Slug
wp-jobsearch
Published
2021-10-05
Title
JobSearch WP Job Board < 1.8.2 - Subscriber+ Add/Update Schedule Calls
Slug
wp-jobsearch
Published
2023-11-24
Title
JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE
Slug
wp-jobsearch
Published
2023-11-24
Title
JobSearch WP Job Board < 2.3.4 - Authentication Bypass
Slug
wp-jobsearch
Published
2024-08-12
Title
JobSearch <= 2.3.4 - Authentication Bypass to Account Takeover
Slug
wp-jobsearch
Published
2024-08-26
Title
JobSearch < 2.5.4 - Cross-Site Request Forgery
Slug
wp-jobsearch
Published
2024-08-26
Title
JobSearch < 2.5.6 - Missing Authorization
Slug
wp-jobsearch
Published
2024-08-26
Title
JobSearch < 2.5.4 - Unauthenticated PHP Object Injection
Slug
wp-jobsearch
Published
2024-08-26
Title
JobSearch < 2.5.6 - Missing Authorization
Slug
wp-jobsearch
Published
2024-09-30
Title
JobSearch < 2.6.1 - Reflected Cross-Site Scripting
Slug
wp-jobsearch
Published
2024-09-30
Title
JobSearch < 2.6.1 - Unauthenticated PHP Object Injection
Slug
wp-jobsearch
Published
2024-11-05
Title
WP JobSearch < 2.6.8 - Authenticated (Subscriber+) Arbitrary File Upload