WordPress Job Portal < 2.0.6 - SQL Injection

The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape the city parameter before using it in a SQL statement,leading to a SQL injection vulnerability that is exploitable by unauthenticated users. This vulnerability can be used to extractsensitive data from the database or...

CVE-2026-7071-access-Control

CodeAstro 在线求职门户（PHP MySQL）中的未认证简历泄露 详细信息 供应商： CodeAstro 产品： 基于 PHP MySQL 的在线求职门户项目 版本： 1.0 漏洞类型： 访问控制不当 / 信息泄露 CWE： CWE-284、CWE-200、CWE-548 受影响端点： /users/user-cvs/ 影响： 未认证即可访问所有用户简历 描述 该应用程序将用户简历存储在公开可访问的目录（/users/user-cvs/）中，未强制执行身份验证或授权检查。 未认证的攻击者可以通过请求文件 URL 直接访问并下载任何用户的简历。...

CVE-2026-7028-SQLI

CodeAstro-Online-Job-Portal-SQLi-Delete-All 详细信息 供应商： CodeAstro 产品： Online Job Portal Project in PHP MySQL 版本： 1.0 漏洞类型： SQL 注入 CWE： CWE-89 受影响端点： /admin/jobs-admins/delete-jobs.php 参数： id GET 影响： 可删除数据库中的所有职位记录 描述 在 CodeAstro Online Job Portal 的管理员职位删除功能中发现了一个 SQL 注入漏洞。 该应用程序直接在 SQL 查询中使用 id...

CVE-2026-81299

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

CVE-2026-81299

CVE-2026-81299 affects the WordPress WP Job Portal plugin, versions

CVE-2026-81299 WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

EUVD-2026-67729

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

CVE-2026-81299 WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

PT-2026-83147

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

CVE-2026-81299: Authorization Bypass Through User-Controlled Key

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Md Mehedi Hasan in WordPress Plugin WP Job Portal versions = 2.5.9...

CVE-2026-77681

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

CVE-2026-77681 CodeAstro Online Job Portal update-profile.php unrestricted upload

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

EUVD-2026-63876

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

CVE-2026-77681 CodeAstro Online Job Portal update-profile.php unrestricted upload

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

CVE-2026-77681

CodeAstro Online Job Portal 1.0 is affected by an unrestricted file upload vulnerability in the file /users/update-profile.php. Manipulation of the Name argument allows a remote, authenticated attacker (low privileges) to upload arbitrary files, leading to low impact on confidentiality, integrity...

CVE-2026-77681: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

PT-2026-79350

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

EUVD-2026-62220

A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...

CVE-2026-75986

SQL injection in code-projects Online Job Portal System 1.0 via the txtUserName argument in /ForPass.php (Password Recovery). No authentication required; CVSS 7.3 (HIGH). Proof-of-concept exploit disclosed. No patch version is mentioned in the provided documents.