CVE-2025-49324

Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through = 2.1.60...

CVE-2025-49324

Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through = 2.1.60...

CVE-2025-49324 WordPress Job Board Manager <= 2.1.60 - Broken Access Control Vulnerability

Missing Authorization vulnerability in PickPlugins Job Board Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Job Board Manager: from n/a through 2.1.60...

CVE-2025-49324 WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability

Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through = 2.1.60...

CVE-2025-49324

CVE-2025-49324 affects PickPlugins Job Board Manager (WordPress) up to version 2.1.60. The issue is described as a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access/actions. This direct detail is corroborated by Red H...

PT-2025-24248 · Pickplugins · Pickplugins Job Board Manager

Name of the Vulnerable Software and Affected Versions: PickPlugins Job Board Manager versions 2.1.60 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

WordPress plugin Job Board Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Hiro Code016Hiro in WordPress Plugin Job Board Manager versions = 2.1.60...

VulnCheck KEV: CVE-2023-4490

The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

SUSE-SU-2025:01751-1 Security update for slurm

This update for slurm fixes the following issues: Update to version 24.11.5. Security issues fixed: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator bsc1243666. Other changes and issues fixed:...

BIT-GITLAB-2025-1110 Insufficient Granularity of Access Control in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1. In certain circumstances, a user with limited permissions could access Job Data via a crafted GraphQL query...

CVE-2025-47438

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through = 2.3.1...

CVE-2025-48273

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpjobportal WP Job Portal wp-job-portal allows Path Traversal.This issue affects WP Job Portal: from n/a through = 2.3.2...

CVE-2025-48273

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpjobportal WP Job Portal allows Path Traversal. This issue affects WP Job Portal: from n/a through 2.3.2...

CVE-2025-48273

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpjobportal WP Job Portal wp-job-portal allows Path Traversal.This issue affects WP Job Portal: from n/a through = 2.3.2...

CVE-2025-47438

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through = 2.3.1...

CVE-2025-39536

Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6...

CVE-2025-39536

CVE-2025-39536 affects WordPress plugin JobHunt Job Alerts (versions n/a–3.6). This is a Missing Authorization vulnerability arising from misconfigured access control that could enable Arbitrary Content Deletion. The provided documents do not confirm a patch; Patch Status is listed as Unpatched, ...

CVE-2025-39536 WordPress JobHunt Job Alerts <= 3.6 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6...

CVE-2025-47438

CVE-2025-47438 - WP Job Portal plugin for WordPress suffers from an unauthenticated local file inclusion due to improper control of the filename for include/require in PHP. This allows an attacker to include local files on the server when exploiting WP Job Portal versions at or below 2.3.1. Multi...