Read the docs

JoomSky

Records42All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

JoomSky records in CISA KEV

No JoomSky vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Js Help Desk 12 records MEDIUM Js Job Manager 11 records MEDIUM Js Jobs 6 records MEDIUM Js Autoz 1 record MEDIUM Js Support Ticket 1 record MEDIUM

Records

11 records in Js Job Manager · all components

TI-2025-23725 CVE-2025-32660 · GHSA-2mpc-pm7m-qc5v

WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0046 Published 2025-04-17 No fix listed CWE-434
TI-2025-23691 CVE-2025-32626 · GHSA-mjhh-qxpj-86jx

WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00509 Published 2025-04-17 No fix listed CWE-89
TI-2025-23244 CVE-2025-32146 · GHSA-c2jh-4x26-fp6w

WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: f…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00797 Published 2025-04-04 No fix listed CWE-98
TI-2025-23692 CVE-2025-32627 · GHSA-qr8p-j5jx-2c52

WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: f…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00974 Published 2025-04-11 No fix listed CWE-98
TI-2025-23005 CVE-2025-31868 · GHSA-37xw-5m35-w77m

WordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00346 Published 2025-04-01 No fix listed CWE-862
TI-2023-13207 CVE-2023-28689 · GHSA-5crx-h3h6-hrh8

WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through 2.0.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.005 Published 2024-12-09 No fix listed CWE-862
TI-2025-36039 CVE-2025-58234 · GHSA-xrhh-372g-2g5q

WordPress JS Job Manager Plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00216 Published 2025-09-22 No fix listed CWE-79
TI-2025-23004 CVE-2025-31867 · GHSA-rc27-pgc8-phj2

WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 25

Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00386 Published 2025-04-01 No fix listed CWE-639
Open these records in search →