Read the docs

ThemeHigh

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

ThemeHigh records in CISA KEV

No ThemeHigh vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Checkout Field Editor For Woocommerce 3 records HIGH Job Manager & Career 2 records MEDIUM Multiple Shipping Addresses For Woocommerce 1 record MEDIUM

Records

2 records in Job Manager & Career · all components

TI-2023-28197 CVE-2023-51545 · GHSA-5gfw-4p9h-vh8j

Cross-site request forgery in ThemeHigh Job Manager & Career – Manage job board listings…

Priority MEDIUM 41

Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job boar…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0027 Published 2023-12-29 No fix listed CWE-352
TI-2023-05438 CVE-2023-5906 · GHSA-p7pg-xwv6-5rhh

Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data Exposure

Priority LOW 34

The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which allows an unauthorized user to view and download private files of other users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00767 Published 2023-11-27 Fixed in 1.4.4
Open these records in search →