WordPress Plugin Vulnerabilities

JS Job <= 1.0.6 - CSRF

Description

The JS Job Manager WordPress plugin was affected by a CSRF security vulnerability.

Affects Plugins

Plugin icon
js-jobs
Fixed in 1.0.7

References

CVE
CVE-2018-20974

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
5b973fe9-0c0e-482e-8746-f3e802073326

Timeline

Publicly Published
2018-05-28 (about 7 years ago)
Added
2019-08-20 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-12-30
Title
Import into Easy Property Listings < 2.2.2 - Cross-Site Request Forgery
Published
2024-07-08
Title
Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery via AJAX actions
Published
2023-05-24
Title
Booking Ultra Pro < 1.1.7 - Cross-Site Request Forgery
Published
2022-03-28
Title
Easy Digital Downloads < 2.11.6 - Arbitrary Payment Note Insertion via CSRF
Published
2022-05-30
Title
PDF24 Article To PDF <= 4.2.2 - Arbitrary Settings Update via CSRF