Read the docs

BlueGlass

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

BlueGlass records in CISA KEV

No BlueGlass vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jobs For Wordpress 7 records MEDIUM

Records

7 records

TI-2024-09367 CVE-2024-10105 · GHSA-6vr9-h9pm-5frx

Jobs for WordPress < 2.7.11 - Contributor+ Stored XSS

Priority MEDIUM 60

The Job Postings WordPress plugin before 2.7.11 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the u…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00323 Published 2025-03-25 Fixed in 2.7.11 CWE-79
TI-2024-00757 CVE-2024-0820 · GHSA-mv3g-77hg-5wrg

Jobs for WordPress < 2.7.4 - Contributor+ Stored XSS

Priority MEDIUM 58

The Jobs for WordPress plugin before 2.7.4 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00457 Published 2024-03-18 Fixed in 2.7.4 CWE-79
TI-2024-09366 CVE-2024-10104 · GHSA-f3mv-cjr3-hr9j

Jobs for WordPress < 2.7.8 - Contributor+ Stored XSS

Priority LOW 27

The Jobs for WordPress plugin before 2.7.8 does not sanitise and escape some of its Job settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00377 Published 2024-11-15 Fixed in 2.7.8 CWE-79
TI-2024-02643 CVE-2024-2833 · GHSA-f9m6-x3qc-mvwg

Jobs for WordPress <= 2.7.5 - Reflected Cross-Site Scripting via job-search

Priority LOW 27

The Jobs for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘job-search’ parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output esc…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00385 Published 2024-04-18 No fix listed CWE-79
Open these records in search →