Wpjobportal

Wp Job Portal

28 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-7950

  • EPSS 1.18%
  • Published 04.09.2024 03:15:04
  • Last modified 04.10.2024 16:12:09

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusion, Arbitrary Settings Update, and User Creation in all versions up to, and including, 2.1.6 via several functi...

8.8

CVE-2024-43266

  • EPSS 0.05%
  • Published 18.08.2024 22:15:09
  • Last modified 05.02.2025 15:27:51

Authorization Bypass Through User-Controlled Key vulnerability in WP Job Portal.This issue affects WP Job Portal: from n/a through 2.1.6.

4.8

CVE-2024-35760

  • EPSS 0.21%
  • Published 21.06.2024 13:15:09
  • Last modified 21.11.2024 09:20:49

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Job Portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.1.3.

4.8

CVE-2024-35759

  • EPSS 0.12%
  • Published 21.06.2024 13:15:09
  • Last modified 21.11.2024 09:20:49

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Job Portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.1.3.

9.8

CVE-2022-41786

  • EPSS 0.09%
  • Published 17.01.2024 18:15:45
  • Last modified 21.11.2024 07:23:50

Missing Authorization vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.1.

8.8

CVE-2023-52184

  • EPSS 0.07%
  • Published 05.01.2024 08:15:43
  • Last modified 21.11.2024 08:39:20

Cross-Site Request Forgery (CSRF) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.6.

9.8

CVE-2023-4490

Exploit
  • EPSS 51.76%
  • Published 25.09.2023 16:15:15
  • Last modified 23.04.2025 17:16:44

The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

5.4

CVE-2023-28534

  • EPSS 0.08%
  • Published 22.06.2023 09:15:11
  • Last modified 21.11.2024 07:55:17

Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board plugin <= 2.0.0 versions.