Lucene search
+L

341 matches found

CNNVD
CNNVD
added 2024/08/16 12:00 a.m.9 views

WordPress plugin Custom Field For WP Job Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin Cust...

4.3CVSS6.5AI score0.00388EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/06/28 1:40 p.m.10 views

WordPress WP Job Manager plugin <= 2.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WP Job Manager - Resume Manager versions = 2.1.0...

4.3CVSS7AI score0.00337EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/06/28 12:00 a.m.12 views

WordPress WP Job Manager - Resume Manager Plugin <= 2.1.0 is vulnerable to Broken Access Control

Software WP Job Manager - Resume Manager Type Plugin Vulnerable versions = 2.1.0 Fixed in 2.2.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37443 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8e5ceb2ec6d1 Credits Rafie Muhamma...

4.3CVSS6.3AI score0.00337EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/06/21 12:00 a.m.19 views

WordPress WP Job Manager - Resume Manager Plugin <= 2.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Job Manager - Resume Manager Type Plugin Vulnerable versions = 2.1.0 Fixed in 2.2.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37241 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 90dee78eac8d Credits Raf...

7AI score0.00203EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/05/14 3:39 p.m.28 views

CVE-2024-34549

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.2.2...

5.3CVSS5.7AI score0.00584EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.8 views

WordPress plugin WP Job Manager 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

5.3CVSS6AI score0.00584EPSS
SaveExploits0References3
CVE
CVE
added 2024/05/09 12:12 p.m.91 views

CVE-2024-34549

CVE-2024-34549: Exposure of Sensitive Information to an Unauthorized Actor in Automattic WP Job Manager (affecting WP Job Manager up to version 2.2.2). The connected Red Hat and Wordfence entries confirm the issue is an Information Exposure vulnerability, exploitable by unauthenticated actors, wi...

5.3CVSS5.2AI score0.00584EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/09 12:12 p.m.35 views

CVE-2024-34549 WordPress WP Job Manager plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.2.2...

5.3CVSS6.6AI score0.00584EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/09 12:00 a.m.17 views

PT-2024-25963 · Automattic · Wp Job Manager

Name of the Vulnerable Software and Affected Versions: WP Job Manager versions prior to 2.2.3 is not mentioned, however, the issue affects WP Job Manager from n/a through 2.2.2, so WP Job Manager versions through 2.2.2 Description: The issue is related to Exposure of Sensitive Information to an...

5.3CVSS7.1AI score0.00584EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/05/07 9:14 a.m.10 views

WordPress WP Job Manager plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin WP Job Manager versions = 2.2.2...

5.3CVSS7AI score0.00584EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/05/07 12:00 a.m.14 views

WordPress WP Job Manager Plugin <= 2.2.2 is vulnerable to Sensitive Data Exposure

Software WP Job Manager Type Plugin Vulnerable versions = 2.2.2 Fixed in 2.3.0 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-34549 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 76cb5788a42c Credits Peng Zhou Required privilege...

5.3CVSS6.5AI score0.00584EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/04/12 3:15 p.m.24 views

CVE-2023-52211

Missing Authorization vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.0.0...

5.3CVSS5.3AI score0.00381EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/12 2:33 p.m.18 views

CVE-2023-52211 WordPress WP Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.0.0...

5.3CVSS7.2AI score0.00381EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/12 12:00 a.m.13 views

PT-2024-14476 · WordPress · Wp Job Manager

Name of the Vulnerable Software and Affected Versions: WP Job Manager versions prior to 2.0.0 Description: A Missing Authorization issue has been identified. Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue...

5.3CVSS7.2AI score0.00381EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/12 12:00 a.m.12 views

WordPress Plugin WP Job Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress...

5.3CVSS8.3AI score0.00381EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2024/01/12 12:00 a.m.22 views

WP Job Manager < 2.1.0 - Cross-Site Request Forgery

Description The WP Job Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.0. This is due to missing or incorrect nonce validation on the settingssave function. This makes it possible for unauthenticated attackers to save settings via a...

6.6AI score0.00115EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/01/05 12:00 a.m.15 views

WordPress WP Job Manager Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Job Manager Type Plugin Vulnerable versions = 2.0.0 Fixed in 2.1.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-52212 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 577b1c2d7484 Credits Rafie Muhammad...

6.7AI score0.00115EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/01/05 12:00 a.m.15 views

WordPress WP Job Manager Plugin <= 2.0.0 is vulnerable to Broken Access Control

Software WP Job Manager Type Plugin Vulnerable versions = 2.0.0 Fixed in 2.1.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-52211 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID dca091e30b7d Credits Rafie Muhammad Patchstack...

5.3CVSS6.6AI score0.00381EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2024/01/05 12:00 a.m.21 views

Job Manager & Career – Manage job board listings, and recruitments < 1.4.5 - Cross-Site Request Forgery to PHP Object Injection

Description The Job Manager & Career – Manage job board listings, and recruitments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on the savepluginsettings function. This makes it...

9.6CVSS6.7AI score0.0027EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/12/29 1:15 p.m.26 views

CVE-2023-51545

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

9.6CVSS0.0027EPSS
SaveExploits0References1
Rows per page
Query Builder