Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: WP JobSearch 2.3.4 Clear all filters
TI-2023-06035 CVE-2023-6584 · GHSA-p9wg-pjwr-cp67

JobSearch WP Job Board < 2.3.4 - Authentication Bypass

Priority MEDIUM 40

The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00549 Published 2024-02-27 Fixed in 2.3.4
TI-2023-06036 CVE-2023-6585 · GHSA-q25f-2gjj-7ppp

JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE

Priority HIGH 72

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00602 Published 2024-02-27 Fixed in 2.3.4