Sfwebservice

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sfwebservice records in CISA KEV

No Sfwebservice vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Injob 1 record MEDIUM

Records

2 records

TI-2025-01128 CVE-2025-1315 · GHSA-9gjv-m28f-8973

InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset

MEDIUM 49

The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2025-03-07 No fix listed CWE-288

TI-2025-26219 CVE-2025-39477 · GHSA-cvpp-hjp6-qcpv

WordPress InWave Jobs Plugin <= 3.5.8 - Broken Access Control vulnerability

MEDIUM 43

Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWave Jobs: from n/a through 3.5.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00347 Published 2026-01-06 No fix listed CWE-862

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0