Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

29 records

Vendor: eyecix Clear all filters
TI-2026-41320 CVE-2026-57383 · GHSA-xm6f-xwr4-6jhh

WordPress JobSearch plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Stored XSS.This issue affects JobSearch: from n/a through <= 3.2.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
TI-2026-20495 CVE-2026-25377 · GHSA-xr7x-cpgh-xg5x

WordPress Addon Jobsearch Chat plugin <= 3.0 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eyecix Addon Jobsearch Chat addon-jobsearch-chat allows SQL Injection.This issue affects Addon Jobsearch Chat: from n/…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00294 Published 2026-03-25 No fix listed CWE-89
TI-2026-20494 CVE-2026-25376 · GHSA-j949-96cg-m67c

WordPress Addon Jobsearch Chat plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix Addon Jobsearch Chat addon-jobsearch-chat allows Reflected XSS.This issue affects Addon Jobsearch Chat: from n/…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2026-03-25 No fix listed CWE-79
TI-2025-32856 CVE-2025-52806 · GHSA-c4g2-75jw-vv2g

WordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in eyecix JobSearch wp-jobsearch allows PHP Local File Inclusion.This issue affects JobSearch: from n/…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00686 Published 2025-08-14 No fix listed CWE-98
TI-2025-31893 CVE-2025-49978 · GHSA-3f52-4448-3p36

WordPress JobSearch plugin < 3.0.6 - Insecure Direct Object References (IDOR) Vulnerability

Priority LOW 20

Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through < 3.0…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00385 Published 2025-06-20 No fix listed CWE-639
TI-2024-07991 CVE-2024-8615 · GHSA-32mh-mpq7-pqcr

WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 50

The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_location_load_excel_file_callback() function in all versions up to, and includi…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0086 Published 2024-11-06 No fix listed CWE-434
TI-2024-07990 CVE-2024-8614 · GHSA-xcrw-r9q7-wxcx

WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload

Priority MEDIUM 50

The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_wp_handle_upload() function in all versions up to, and including, 2.6.7.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00793 Published 2024-11-06 No fix listed CWE-434
TI-2023-06035 CVE-2023-6584 · GHSA-p9wg-pjwr-cp67

JobSearch WP Job Board < 2.3.4 - Authentication Bypass

Priority MEDIUM 40

The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00549 Published 2024-02-27 Fixed in 2.3.4
TI-2023-06036 CVE-2023-6585 · GHSA-q25f-2gjj-7ppp

JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE

Priority HIGH 72

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00602 Published 2024-02-27 Fixed in 2.3.4
TI-2021-03221 CVE-2021-4364 · GHSA-v7gj-wffh-45gp

JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function

Priority LOW 21

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_add_job_import_schedule_call() function in versions up to, and including, 1.8.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00699 Published 2023-06-07 No fix listed CWE-284
TI-2021-03218 CVE-2021-4361 · GHSA-jvpp-jchv-3vjq

JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Arbitrary Options Update

Priority MEDIUM 42

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_job_integrations_settin_save AJAX action in versions up to, and including, 1.8.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01196 Published 2023-06-07 No fix listed CWE-284
Load more