Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: ultimatemember Component: Jobboardwp Clear all filters
TI-2023-09529 CVE-2023-23715 · GHSA-crfq-94qw-vfrw

WordPress JobBoardWP – Job Board Listings and Submissions plugin <= 1.2.2 - IDOR Leading To Job Removal Vulnerability

Priority LOW 39

Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoardWP – Job Board Listings…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0055 Published 2024-12-09 No fix listed CWE-862
TI-2024-10086 CVE-2024-10880 · GHSA-6j2m-wpqq-823h

JobBoardWP – Job Board Listings and Submissions <= 1.3.0 - Reflected Cross-Site Scripting

Priority LOW 28

The JobBoardWP – Job Board Listings and Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all v…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00504 Published 2024-11-23 No fix listed CWE-79
TI-2022-03726 CVE-2022-4061 · GHSA-3459-2j34-8x8g

JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload

Priority HIGH 72

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01421 Published 2022-12-19 Fixed in 1.2.2
TI-2021-16698 CVE-2021-39329 · GHSA-f6xv-f8g8-2ffj

JobBoardWP – Job Board Listings and Submissions <= 1.0.7 Authenticated Stored Cross-Site Scripting

Priority LOW 27

The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/includes/admin/class-metabox.php file which allowed…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01037 Published 2021-10-19 No fix listed CWE-79