Vulnerabilities

TI-2025-22237 CVE-2025-30967 · GHSA-gvjv-gp9v-cgcq

WordPress WPJobBoard plugin < 5.11.1 - CSRF to Remote Code Execution (RCE) vulnerability

MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00249 Published 2025-04-15 Fixed in 5.11.1 CWE-352

TI-2025-22236 CVE-2025-30966 · GHSA-v2g6-2gw9-gx3g

LOW 24

Path Traversal vulnerability in NotFound WPJobBoard allows Path Traversal.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00334 Published 2025-04-15 Fixed in 5.11.1 CWE-35

TI-2025-22235 CVE-2025-30965 · GHSA-mgcw-m7m8-h679

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Cross Site Request Forgery.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00156 Published 2025-04-15 Fixed in 5.11.1 CWE-352