Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpjobportal WP Job Portal wp-job-portal allows Blind SQL Injection.This issue affects WP Job Portal: from n/a through…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00342 · Published 2025-06-17 · No fix listed CWE-89
Priority MEDIUM 44
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job P…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00716 · Published 2025-05-23 · No fix listed CWE-98
Priority LOW 39
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Portal wp-job-portal allows Path Traversal.This issue affects WP Job Portal: from n/a through <= 2.3.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00523 · Published 2025-05-23 · No fix listed CWE-22
Priority LOW 30
Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through <= 2.3.2.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00324 · Published 2025-05-19 · No fix listed CWE-862
Priority MEDIUM 41
Path Traversal: '.../...//' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through <= 2.2.8.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00664 · Published 2025-02-25 · No fix listed CWE-35
Priority LOW 20
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.8 via the deleteUserPhot…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00327 · Published 2025-02-22 · No fix listed CWE-639
Priority LOW 30
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the getresumefiled…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00439 · Published 2025-02-01 · No fix listed CWE-639
Priority LOW 31
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00539 · Published 2025-02-01 · No fix listed CWE-862
Priority LOW 30
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the deleteCompanyL…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-02-01 · No fix listed CWE-639
Priority LOW 20
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the enforcedelete(…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00364 · Published 2025-02-01 · No fix listed CWE-639
Priority LOW 20
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the 'jobenforcedel…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00364 · Published 2025-02-01 · No fix listed CWE-639
Priority LOW 20
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validat…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00323 · Published 2025-01-07 · No fix listed CWE-639
Priority LOW 20
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validat…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00386 · Published 2025-01-03 · No fix listed CWE-639
Priority LOW 30
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getResumeFileDownloadById() fu…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00471 · Published 2024-12-14 · No fix listed CWE-359
Priority LOW 23
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'fieldfor', 'visibleParent' and 'id' parameters in all versions up to, and in…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00466 · Published 2024-12-14 · No fix listed CWE-89
Priority LOW 39
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'resumeid' parameter in all versions up to, and including, 2.2.1 due to insuf…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00517 · Published 2024-12-14 · No fix listed CWE-89
Priority LOW 23
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'ff' parameter of the getFieldsForVisibleCombobox() function in all versions…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00466 · Published 2024-12-14 · No fix listed CWE-89
Priority LOW 23
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'page_id' parameter of the wpjobportal_deactivate() function in all versions…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00466 · Published 2024-12-14 · No fix listed CWE-89
Priority MEDIUM 42
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the assignUserRole() function in all versi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00466 · Published 2024-12-14 · No fix listed CWE-862
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpjobportal WP Job Portal wp-job-portal allows Stored XSS.This issue affects WP Job Portal: from n/a through <= 2.2.0.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00265 · Published 2024-11-18 · No fix listed CWE-79
Priority MEDIUM 51
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusion, Arbitrary Settings Update, and User Creation in all versions up to, and inclu…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01197 · Published 2024-09-04 · No fix listed CWE-22
Priority LOW 38
Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal.This issue affects WP Job Portal: from n/a through <= 2.1.8.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00363 · Published 2024-08-18 · No fix listed CWE-639
Priority LOW 26
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpjobportal WP Job Portal wp-job-portal.This issue affects WP Job Portal: from n/a through <= 2.1.3.
CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00278 · Published 2024-06-21 · No fix listed CWE-79
Priority LOW 26
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpjobportal WP Job Portal wp-job-portal allows DOM-Based XSS.This issue affects WP Job Portal: from n/a through <= 2.1…
CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00315 · Published 2024-06-21 · No fix listed CWE-79
Priority MEDIUM 43
Missing Authorization vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00481 · Published 2024-01-17 · No fix listed CWE-862
Load more