Read the docs

PressTigers

Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

PressTigers records in CISA KEV

No PressTigers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Simple Job Board · all components

Priority MEDIUM 60

In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails accoun…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00375 Published 2025-05-15 Fixed in 2.12.2 CWE-79
Priority MEDIUM 51

The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00421 Published 2025-05-15 Fixed in 2.12.6
Priority MEDIUM 51

The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2024-04-09 No fix listed CWE-502
Priority MEDIUM 48

Missing Authorization vulnerability in PressTigers Simple Job Board simple-job-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through <= 2.10.5…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00451 Published 2025-01-02 No fix listed CWE-862
Priority LOW 35

The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0062 Published 2024-08-24 No fix listed CWE-502
Priority LOW 27

The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable echo'd out via the ~/admin/settings/class-simple-job-board-s…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00915 Published 2021-10-21 No fix listed CWE-79
Priority LOW 26

The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00993 Published 2022-08-22 Fixed in 2.10.0 CWE-200
Open these records in search →