Read the docs

HM Plugin

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

HM Plugin records in CISA KEV

No HM Plugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jobwp 2 records MEDIUM Accept Stripe Donation - Aidwp 1 record LOW Aidwp 1 record MEDIUM Hm Multiple Roles 1 record MEDIUM Wordpress Books Gallery 1 record LOW

Records

2 records in Jobwp · all components

TI-2023-13774 CVE-2023-29384 · GHSA-fc6q-f8v8-34rw

WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload

Priority MEDIUM 52

Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01405 Published 2023-12-20 No fix listed CWE-434
TI-2023-26151 CVE-2023-48288 · GHSA-jc8g-9q2p-m8vx

WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposure

Priority LOW 33

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a thr…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00509 Published 2023-12-21 No fix listed CWE-200
Open these records in search →