WordPress Job Portal < 2.0.6 - SQL Injection

The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape the city parameter before using it in a SQL statement,leading to a SQL injection vulnerability that is exploitable by unauthenticated users. This vulnerability can be used to extractsensitive data from the database or...

CVE-2026-7071-access-Control

Exposición de Currículums sin Autenticación en CodeAstro Online Job Portal PHP MySQL Detalles Vendedor: CodeAstro Producto: Proyecto de Portal de Empleo en Línea en PHP MySQL Versión: 1.0 Tipo de Vulnerabilidad: Control de Acceso Inadecuado / Divulgación de Información CWE: CWE-284, CWE-200,...

CVE-2026-7028-SQLI

CodeAstro-Online-Job-Portal-SQLi-Delete-All Detalles Proveedor: CodeAstro Producto: Proyecto de Portal de Empleo en Línea en PHP MySQL Versión: 1.0 Tipo de vulnerabilidad: Inyección SQL CWE: CWE-89 Endpoint afectado: /admin/jobs-admins/delete-jobs.php Parámetro: id GET Impacto: Permite la...

CVE-2026-81299

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

CVE-2026-81299 WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

CVE-2026-81299

CVE-2026-81299 affects the WordPress WP Job Portal plugin, versions

EUVD-2026-67729

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

CVE-2026-81299 WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

PT-2026-83147

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

CVE-2026-81299: Authorization Bypass Through User-Controlled Key

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Md Mehedi Hasan in WordPress Plugin WP Job Portal versions = 2.5.9...

CVE-2026-77681

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

CVE-2026-77681 CodeAstro Online Job Portal update-profile.php unrestricted upload

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

EUVD-2026-63876

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

CVE-2026-77681 CodeAstro Online Job Portal update-profile.php unrestricted upload

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

CVE-2026-77681

CodeAstro Online Job Portal 1.0 is affected by an unrestricted file upload vulnerability in the file /users/update-profile.php. Manipulation of the Name argument allows a remote, authenticated attacker (low privileges) to upload arbitrary files, leading to low impact on confidentiality, integrity...

CVE-2026-77681: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

PT-2026-79350

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

EUVD-2026-62220

A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...

CVE-2026-75986

SQL injection in code-projects Online Job Portal System 1.0 via the txtUserName argument in /ForPass.php (Password Recovery). No authentication required; CVSS 7.3 (HIGH). Proof-of-concept exploit disclosed. No patch version is mentioned in the provided documents.