Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: JoomSky Component: Js Job Manager Clear all filters
TI-2025-36039 CVE-2025-58234 · GHSA-xrhh-372g-2g5q

WordPress JS Job Manager Plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00216 Published 2025-09-22 No fix listed CWE-79
TI-2025-23691 CVE-2025-32626 · GHSA-mjhh-qxpj-86jx

WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00509 Published 2025-04-17 No fix listed CWE-89
TI-2025-23725 CVE-2025-32660 · GHSA-2mpc-pm7m-qc5v

WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0046 Published 2025-04-17 No fix listed CWE-434
TI-2025-23692 CVE-2025-32627 · GHSA-qr8p-j5jx-2c52

WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: f…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00974 Published 2025-04-11 No fix listed CWE-98
TI-2025-23244 CVE-2025-32146 · GHSA-c2jh-4x26-fp6w

WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: f…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00797 Published 2025-04-04 No fix listed CWE-98
TI-2025-23005 CVE-2025-31868 · GHSA-37xw-5m35-w77m

WordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00346 Published 2025-04-01 No fix listed CWE-862
TI-2025-23004 CVE-2025-31867 · GHSA-rc27-pgc8-phj2

WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 25

Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00386 Published 2025-04-01 No fix listed CWE-639
TI-2023-13207 CVE-2023-28689 · GHSA-5crx-h3h6-hrh8

WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through 2.0.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.005 Published 2024-12-09 No fix listed CWE-862