Vulnerabilities

TI-2025-26219 CVE-2025-39477 · GHSA-cvpp-hjp6-qcpv

WordPress InWave Jobs Plugin <= 3.5.8 - Broken Access Control vulnerability

MEDIUM 43

Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWave Jobs: from n/a through 3.5.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00347 Published 2026-01-06 No fix listed CWE-862

TI-2025-01128 CVE-2025-1315 · GHSA-9gjv-m28f-8973

InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset

MEDIUM 49

The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2025-03-07 No fix listed CWE-288

Vulnerabilities

Filters

WordPress InWave Jobs Plugin <= 3.5.8 - Broken Access Control vulnerability

InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset