Lucene search
+L

474 matches found

Nuclei
Nuclei
added 2026/09/16 2:04 a.m.36 views

WordPress Simple Job Board - Unauthorized Data Access

The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetchquickjob function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be...

5.3CVSS6.8AI score0.00909EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 6:18 p.m.8 views

CVE-2023-29384

CVE-2023-29384 CVE-2023-29384 Auto Explotador para el plugin de bolsa de trabajo y reclutamiento de WordPress Tipo de vulnerabilidad: Carga arbitraria de archivos...

10CVSS8.4AI score0.01405EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 3:52 p.m.8 views

Wordpress-CVE-2020-35749

Exploit de la vulnerabilidad LFI del Plugin Simple Job Board de Wordpress 2.9.3 CVE-2020-35749 Resumen El Plugin Simple Job Board de WordPress es propenso a una vulnerabilidad de recorrido de directorios porque no verifica suficientemente la entrada proporcionada por el usuario. La explotación de...

7.7CVSS7.5AI score0.30479EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/13 5:14 a.m.9 views

CVE-2024-1813-POC

CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Inyección de Objetos PHP no autenticada 🎥 Demostración de la prueba de concepto De extremo a extremo: un visitante almacena un objeto PHP serializado a través del formulario público de solicitud, el administrador abre la lista de solicitantes ...

9.8CVSS8.4AI score0.01219EPSS
SaveExploits2
NVD
NVD
added 2026/09/05 12:16 p.m.11 views

CVE-2025-9049

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokriaccountmemberpermissions' function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with...

8.8CVSS0.00246EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/05 11:28 a.m.38 views

CVE-2025-9049 Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokriaccountmemberpermissions' function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with...

8.8CVSS0.00246EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/05 11:28 a.m.11 views

EUVD-2025-210856

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokriaccountmemberpermissions' function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with...

8.8CVSS5.4AI score0.00246EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/05 11:28 a.m.20 views

CVE-2025-9049

Nokri – Job Board WordPress Theme (versions up to and including 1.6.4 ) is vulnerable to privilege escalation via account takeover due to a missing capability check on the nokri_account_member_permissions function. An authenticated attacker with Subscriber-level access can create new Subscriber u...

8.8CVSS5.4AI score0.00246EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/01 12:17 p.m.9 views

CVE-2026-18550

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the nokriresetpassword function, which allows empty attacker-supplied reset tokens to...

9.8CVSS0.00326EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/01 11:31 a.m.16 views

EUVD-2026-69021

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the nokriresetpassword function, which allows empty attacker-supplied reset tokens to...

9.8CVSS5.8AI score0.00326EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/09/01 7:05 a.m.8 views

WordPress Nokri - Job Board WordPress Theme plugin <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter vulnerability

WordPress Nokri - Job Board WordPress Theme plugin = 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter vulnerability discovered by d.v4ns3c in WordPress Theme Nokri versions = 1.6.6...

9.8CVSS5.9AI score0.00326EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.19 views

PT-2026-84146

Name of the Vulnerable Software and Affected Versions Nokri - Job Board WordPress Theme versions prior to 1.6.7 Description Insufficient reset token validation in the nokri reset password function allows unauthenticated attackers to perform privilege escalation via account takeover. By providing ...

9.8CVSS5.8AI score0.00326EPSS
SaveExploits0References7
GithubExploit
GithubExploit
added 2026/06/18 9:42 a.m.110 views

Exploit for Deserialization of Untrusted Data in Presstigers Simple_Job_Board

CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Unauth...

9.8CVSS8.5AI score0.01219EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2026/06/04 2:49 p.m.148 views

Exploit for Deserialization of Untrusted Data in Presstigers Simple_Job_Board

CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Unauth...

9.8CVSS5.8AI score0.01219EPSS
SaveExploits2
NVD
NVD
added 2026/05/12 11:16 p.m.34 views

CVE-2026-44341

GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval endpoint that allows unauthenticated users to access job details by directly manipulating object identifiers. The endpoint lacks proper authentication and authorization checks, resulting in unauthorized access ...

5.3CVSS0.00239EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:12 a.m.35 views

CVE-2025-1313

The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.3. This is due to the plugin not properly validating a user's identity prior to updating their details like email address. This makes it...

8.8CVSS6.9AI score0.0038EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/30 12:00 a.m.29 views

WordPress Greenhouse Job Board plugin cross-site scripting vulnerability

The WordPress Greenhouse Job Board plugin is a tool for integrating job listings from the Greenhouse.io recruiting platform into your WordPress site. The WordPress Greenhouse Job Board plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective...

6.1CVSS6.1AI score0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.14 views

CVE-2025-67633

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brownbagmarketing Greenhouse Job Board greenhouse-job-board allows DOM-Based XSS.This issue affects Greenhouse Job Board: from n/a through = 2.7.3...

5.9CVSS6.4AI score0.00207EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.28 views

EUVD-2025-205274

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brownbagmarketing Greenhouse Job Board greenhouse-job-board allows DOM-Based XSS.This issue affects Greenhouse Job Board: from n/a through = 2.7.3...

6.1CVSS5.9AI score0.00207EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.22 views

CVE-2025-67633

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brownbagmarketing Greenhouse Job Board greenhouse-job-board allows DOM-Based XSS.This issue affects Greenhouse Job Board: from n/a through = 2.7.3...

5.9CVSS0.00207EPSS
SaveExploits0References1
Rows per page
Query Builder