Vulnerabilities

TI-2026-67951 CVE-2026-39752 · GHSA-9h4j-8q7h-44x4

Arbitrary file deletion in Jobs for WordPress plugin

LOW 34

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00437 Published 2026-10-06 No fix listed CWE-22

TI-2026-19172 CVE-2026-23806 · GHSA-m5pg-39xw-rv4g

WordPress Jobs for WordPress plugin <= 2.8 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in BlueGlass Interactive AG Jobs for WordPress job-postings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jobs for WordPress: from n/a thro…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00367 Published 2026-03-25 No fix listed CWE-862

TI-2025-42118 CVE-2025-68597 · GHSA-vvm7-2r5j-f59p

WordPress Jobs for WordPress plugin <= 2.8.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlueGlass Interactive AG Jobs for WordPress job-postings allows Stored XSS.This issue affects Jobs for WordPress: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00159 Published 2025-12-24 No fix listed CWE-79

TI-2025-31963 CVE-2025-50050 · GHSA-gpj4-m37f-xfr4

WordPress Jobs for WordPress plugin <= 2.7.14 - Cross Site Scripting (XSS) Vulnerability