WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-job-portal
Published
2026-02-03
Title
WP Job Portal < 2.4.5 - Missing Authorization
Slug
wp-job-portal
Published
2026-03-23
Title
WP Job Portal < 2.4.9 - Unauthenticated SQL Injection via 'radius' Parameter
Slug
wp-job-portal
Published
2026-03-25
Title
WP Job Portal < 2.5.0 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field
Slug
wp-job-portal
Published
2026-05-23
Title
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website < 2.5.2 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-job-portal
Published
2026-05-23
Title
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website < 2.5.2 - Unauthenticated SQL Injection
Slug
wp-job-portal
Published
2026-06-02
Title
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website < 2.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-job-portal
Published
2026-06-22
Title
WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection
Slug
wp-job-portal
Published
2026-06-22
Title
WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR
Slug
wp-job-portal
Published
2026-06-25
Title
WP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' Parameter
Slug
wp-job-portal
Published
2026-06-26
Title
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website < 2.5.3 - Authenticated (Contributor+) SQL Injection
Slug
wp-job-portal
Published
2026-08-06
Title
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website < 2.5.7 - Authenticated (Subscriber+) SQL Injection
Slug
wp-job-portal
Published
2026-08-27
Title
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website < 2.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
wp-job-portal
Published
2026-10-29
Title
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website < 2.7.2 - Missing Authorization
Slug
wp-job-portal
Published
2026-10-30
Title
WP Job Portal < 2.7.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter
Slug
wp-jobhunt
Published
2018-12-04
Title
JobCareer < 2.4.1 - User enumeration & Reset password
Slug
wp-jobhunt
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover
Slug
wp-jobhunt
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
Slug
wp-jobhunt
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Authentication Bypass
Slug
wp-jobhunt
Published
2025-03-13
Title
WP JobHunt <= 7.1 - Authentication Bypass to Candidate
Slug
wp-jobhunt
Published
2025-05-16
Title
WP JobHunt <= 7.1 - Unauthenticated Insecure Direct Object Reference
Slug
wp-jobhunt
Published
2025-07-21
Title
WP JobHunt <= 7.2 - Subscriber+ Arbitrary Account Deletion via IDOR
Slug
wp-jobhunt
Published
2025-10-09
Title
WP JobHunt < 7.7 - Authenticated (Candidate+) Stored Cross-Site Scripting via ‘cs_job_title’
Slug
wp-jobhunt
Published
2025-10-09
Title
WP JobHunt < 7.7 Authenticated (Custom+) Authorization Bypass
Slug
wp-jobhunt
Published
2025-12-20
Title
WP JobHunt <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference
Slug
wp-jobhunt
Published
2025-12-20
Title
WP JobHunt <= 7.7 - Missing Authorization to Authenticated (Candidate+) Stored Cross-Site Scripting via 'status'