Lucene search
+L

7691 matches found

NVD
NVD
added 2025/05/15 8:15 p.m.14 views

CVE-2024-7762

The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes...

3.7CVSS0.00403EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/15 8:15 p.m.13 views

CVE-2024-7761

In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor...

6.1CVSS0.0036EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/15 8:15 p.m.4 views

CVE-2024-7761

In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor...

6.1CVSS5.8AI score0.0036EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/05/15 8:07 p.m.10 views

CVE-2024-7762 Simple Job Board < 2.12.6 - Unauthenticated Resumes Download

The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes...

7.1AI score0.00403EPSS
SaveExploits1References1
CVE
CVE
added 2025/05/15 8:07 p.m.36 views

CVE-2024-7762

CVE-2024-7762 affects the WordPress plugin Simple Job Board (versions prior to 2.12.6). The vulnerability arises because the plugin does not prevent listing of uploaded files, allowing unauthenticated users to access and download uploaded resumes. Impact is limited to unauthorized disclosure of u...

3.7CVSS6.6AI score0.00403EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/15 8:07 p.m.10 views

CVE-2024-7761 Simple Job Board < 2.12.2 - Admin+ Stored XSS

In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor...

5.9AI score0.0036EPSS
SaveExploits1References1
CVE
CVE
added 2025/05/15 8:07 p.m.39 views

CVE-2024-7761

CVE-2024-7761 affects the WordPress Simple Job Board plugin prior to version 2.12.2. The vulnerability is a Stored XSS that can be executed via the editor/admin interface by embedding a malicious script, potentially enabling an account takeover backdoor. Affected product: Simple Job Board WordPre...

6.1CVSS5.8AI score0.0036EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/05/15 8:07 p.m.24 views

CVE-2024-7762 Simple Job Board < 2.12.6 - Unauthenticated Resumes Download

The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes...

0.00403EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/05/15 8:07 p.m.20 views

CVE-2024-7761 Simple Job Board < 2.12.2 - Admin+ Stored XSS

In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor...

0.0036EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/05/15 12:00 a.m.9 views

PT-2025-21503 · WordPress · Simple Job Board

Name of the Vulnerable Software and Affected Versions: The Simple Job Board WordPress plugin versions prior to 2.12.6 Description: The issue allows unauthenticated users to access and download uploaded resumes because the plugin does not prevent uploaded files from being listed. Recommendations:...

7.5CVSS7.5AI score0.00403EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/05/15 12:00 a.m.7 views

WordPress plugin Simple Job Board 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS6.1AI score0.0036EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/15 12:00 a.m.7 views

WordPress plugin WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WP ERP | Complete HR solution...

7.5CVSS7.2AI score0.00521EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/05/15 12:00 a.m.7 views

WordPress plugin WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WP ERP | Complete HR solution...

4.8CVSS4.7AI score0.00312EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/05/15 12:00 a.m.8 views

PT-2025-21502 · WordPress · Simple Job Board

Name of the Vulnerable Software and Affected Versions: Simple Job Board WordPress plugin versions prior to 2.12.2 Description: A vulnerability was found in the Simple Job Board WordPress plugin that allows Stored XSS on behalf of the editor by embedding malicious script. This can lead to account...

6.1CVSS5.8AI score0.0036EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/05/15 12:00 a.m.8 views

WordPress plugin Simple Job Board 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

3.7CVSS7.4AI score0.00403EPSS
SaveExploits1References2
HackRead
HackRead
added 2025/05/14 9:18 a.m.15 views

Job Seekers Targeted as Scammers Pose as Government Agencies on WhatsApp

Scammers impersonate government agencies on WhatsApp to target job seekers with fake offers, phishing sites, and identity theft…...

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2025/05/13 6:40 p.m.30 views

CVE-2025-3744 Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override

Nomad Enterprise “Nomad” jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13...

7.6CVSS0.00283EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/13 6:40 p.m.69 views

CVE-2025-3744

CVE-2025-3744 affects HashiCorp Nomad Enterprise: when using the policy override option, Nomad Enterprise jobs can bypass mandatory sentinel policies. Root cause details are not explicitly enumerated beyond this bypass behavior, but the vulnerability is quantified as high severity (CVSS v3.1: 7.6...

7.6CVSS7.4AI score0.00283EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/10 11:21 p.m.17 views

CVE-2025-29813

Spoofable identity claims Authentication Bypass by Assumed-Immutable Data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...

10CVSS9.3AI score0.01678EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/08 11:15 p.m.16 views

CVE-2025-29813

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...

10CVSS0.01678EPSS
SaveExploits0References1
Rows per page
Query Builder