Read the docs

nicejob

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

nicejob records in CISA KEV

No nicejob vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2024-36406 CVE-2024-54318 · GHSA-j572-7jg9-f4xg

WordPress NiceJob plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through <= 3.6.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0039 Published 2024-12-13 No fix listed CWE-79
TI-2024-29614 CVE-2024-44025 · GHSA-r57q-8v2m-rm47

WordPress NiceJob plugin < 3.6.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through < 3.6.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00275 Published 2024-10-06 No fix listed CWE-79
TI-2024-10093 CVE-2024-10887 · GHSA-9fhr-g7hh-5ffq

NiceJob <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The NiceJob plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes (nicejob-lead, nicejob-review, nicejob-engage, nicejob-badge, nicejob-stories) in all versions up to, a…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00459 Published 2024-11-13 No fix listed CWE-79
Open these records in search →