Lucene search
K

68 matches found

Cvelist
Cvelist
added 2026/03/25 4:14 p.m.21 views

CVE-2026-32493 WordPress JobSearch plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through = 3.2.0...

7.1CVSS0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/25 4:14 p.m.0 views

CVE-2026-32493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through = 3.2.0...

5.8AI score0.00045EPSS
Exploits0References2
CVE
CVE
added 2026/03/25 4:14 p.m.3 views

CVE-2026-32493

The CVE-2026-32493 entry describes a Reflected Cross-Site Scripting (XSS) vulnerability in the eyecix WordPress JobSearch plugin. Affected software: WordPress JobSearch plugin versions up to and including 3.2.0. Root cause: improper neutralization of input during web page generation. Impact: can ...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.4 views

WordPress plugin JobSearch 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.00045EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/23 1:20 p.m.2 views

WordPress JobSearch plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Phat RiO in WordPress Plugin JobSearch versions = 3.2.0...

5.8AI score0.00045EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/22 3:31 p.m.1 views

EUVD-2025-35383

Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through 3.0.8...

6.5AI score0.00097EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.6 views

CVE-2025-62025 WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through 3.0.8...

9.8CVSS6.6AI score0.00097EPSS
Exploits0References1
CVE
CVE
added 2025/10/22 2:32 p.m.4 views

CVE-2025-62025

CVE-2025-62025 is a PHP Object Injection vulnerability affecting the WordPress plugin JobSearch WP Job Board (versions earlier than 3.0.8). The connected sources identify an unauthenticated PHP Object Injection in JobSearch

9.8CVSS6.6AI score0.00097EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.2 views

WordPress plugin JobSearch 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS7.5AI score0.00097EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-24510

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.01574EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2021-34188

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00265EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/08/14 10:33 a.m.7 views

CVE-2025-52806 WordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in eyecix JobSearch wp-jobsearch allows PHP Local File Inclusion.This issue affects JobSearch: from n/a through 3.0.8...

7.5CVSS0.00157EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/08/14 7:19 a.m.2 views

WordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin JobSearch versions 3.0.8...

7.5CVSS6.8AI score0.00157EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/06/20 3:4 p.m.10 views

CVE-2025-49978 WordPress JobSearch plugin < 3.0.6 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 3.0.6...

4.3CVSS0.00218EPSS
Exploits0References1
CVE
CVE
added 2025/06/20 3:4 p.m.13 views

CVE-2025-49978

CVE-2025-49978 describes an Insecure Direct Object References (IDOR) vulnerability in the WordPress JobSearch plugin (WP Job Board) versions n/a through 2.9.0. The issue is an Authorization Bypass Through User-Controlled Key , enabling bypass of access controls for certain resources. This is supp...

4.3CVSS5.9AI score0.00218EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.1 views

WordPress plugin JobSearch 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.5AI score0.00218EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/06/19 4:34 p.m.5 views

WordPress JobSearch plugin < 3.0.6 - Insecure Direct Object References (IDOR) Vulnerability

Insecure Direct Object References IDOR Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin JobSearch versions 3.0.6...

4.3CVSS6.8AI score0.00218EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 4:59 a.m.8 views

CVE-2023-6585

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server...

7.5CVSS7.1AI score0.00367EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2025/05/22 8:50 p.m.2 views

CVE-2021-4364

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearchaddjobimportschedulecall function in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers to add and/or modify schedule calls...

4.3CVSS5.9AI score0.00085EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:21 p.m.4 views

CVE-2021-24421

The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low privilege users to use JavaScript payloads in them and leading to a Stored Cross-Site Scripting issue...

5.4CVSS5.9AI score0.0018EPSS
Exploits2References1
Rows per page
Query Builder