Vulnerabilities

TI-2024-12801 CVE-2024-13773 · GHSA-m727-97qg-jrmp

Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure

LOW 39

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00274 Published 2025-03-14 No fix listed CWE-321

TI-2024-12800 CVE-2024-13772 · GHSA-jrw2-pv6m-v2w5

Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.6.1 - Authentication Bypass

LOW 26

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.6.1.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00283 Published 2025-03-14 No fix listed CWE-288

TI-2024-12799 CVE-2024-13771 · GHSA-98c3-q46g-62qh

Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Password Update

MEDIUM 49

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00439 Published 2025-03-14 No fix listed CWE-288

Vulnerabilities

Filters

Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure

Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.6.1 - Authentication Bypass

Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Password Update