Lucene search
+L

86 matches found

CVE
CVE
•added 2025/01/24 3:21 p.m.•64 views

CVE-2024-13698

CVE-2024-13698 affects the Jobify – Job Board WordPress Theme (

6.5CVSS7AI score0.00325EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/01/24 3:21 p.m.•40 views

CVE-2024-13698 Jobify - Job Board WordPress Theme <= 4.2.7 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation

The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'downloadimageviaai' and 'generateimageviaai' functions in all versions up to, and including, 4.2.7. This makes it possible for unauthenticat...

6.5CVSS0.00325EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•31 views

PT-2025-2247 · WordPress · Jobify

Name of the Vulnerable Software and Affected Versions: Jobify - Job Board WordPress Theme for WordPress versions up to, and including, 4.2.7 Description: The issue concerns unauthorized access and modification of data due to a missing capability check in the download image via ai and generate ima...

6.5CVSS7.6AI score0.00325EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•18 views

WordPress plugin Jobify - Job Board WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin Jobify -...

6.5CVSS8.1AI score0.00325EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•8 views

CVE-2024-13698: Missing Authorization

The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'downloadimageviaai' and 'generateimageviaai' functions in all versions up to, and including, 4.2.7. This makes it possible for unauthenticat...

6.5CVSS5.8AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/09 2:15 p.m.•18 views

CVE-2024-52480

Missing Authorization vulnerability in Astoundify Jobify - Job Board WordPress Theme.This issue affects Jobify - Job Board WordPress Theme: from n/a through 4.2.3...

9.8CVSS7.3AI score0.00368EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 2:15 p.m.•47 views

CVE-2024-52480

Missing Authorization vulnerability in Astoundify Jobify jobify.This issue affects Jobify: from n/a through 4.3.0...

9.8CVSS0.00368EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 1:10 p.m.•34 views

CVE-2024-52480 WordPress Jobify plugin < 4.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Astoundify Jobify jobify.This issue affects Jobify: from n/a through 4.3.0...

5.3CVSS0.00368EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 1:10 p.m.•17 views

CVE-2024-52480 WordPress Jobify plugin < 4.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Astoundify Jobify jobify.This issue affects Jobify: from n/a through 4.3.0...

5.3CVSS8.6AI score0.00368EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 1:10 p.m.•90 views

CVE-2024-52480

CVE-2024-52480 is a Missing Authorization (Broken Access Control) vulnerability in Astoundify Jobify - Job Board WordPress Theme, affecting versions up to 4.2.3. Public docs identify unauthenticated access issues but do not provide concrete exploitation details or a confirmed patch in the sources...

9.8CVSS7.2AI score0.00368EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•24 views

PT-2024-35321 · Astoundify · Astoundify Jobify - Job Board Wordpress Theme

Name of the Vulnerable Software and Affected Versions: Astoundify Jobify - Job Board WordPress Theme versions prior to 4.2.3 Description: The issue is related to a missing authorization vulnerability in the Astoundify Jobify - Job Board WordPress Theme. Recommendations: For versions prior to 4.2....

9.8CVSS9.4AI score0.00368EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•16 views

WordPress plugin Astoundify Jobify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.2AI score0.00368EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•8 views

CVE-2024-52480: Missing Authorization

Missing Authorization vulnerability in Astoundify Jobify jobify.This issue affects Jobify: from n/a through 4.3.0...

9.8CVSS5.8AI score0.00368EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/02 2:15 p.m.•23 views

CVE-2024-52479

Cross-Site Request Forgery CSRF vulnerability in Ben Marshall Jobify - Job Board WordPress Theme allows Cross Site Request Forgery.This issue affects Jobify - Job Board WordPress Theme: from n/a through 4.2.3...

8.8CVSS7.3AI score0.0019EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/02 2:15 p.m.•20 views

CVE-2024-52478

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ben Marshall Jobify - Job Board WordPress Theme allows Stored XSS.This issue affects Jobify - Job Board WordPress Theme: from n/a through 4.2.3...

5.4CVSS7.3AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/02 2:15 p.m.•27 views

CVE-2024-52479

Cross-Site Request Forgery CSRF vulnerability in Astoundify Jobify jobify allows Cross Site Request Forgery.This issue affects Jobify: from n/a through 4.3.0...

8.8CVSS0.0019EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/02 2:15 p.m.•42 views

CVE-2024-52478

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify Jobify jobify allows Stored XSS.This issue affects Jobify: from n/a through 4.3.0...

6.5CVSS0.00277EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/02 1:48 p.m.•22 views

CVE-2024-52479 WordPress Jobify plugin <= 4.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ben Marshall Jobify - Job Board WordPress Theme allows Cross Site Request Forgery.This issue affects Jobify - Job Board WordPress Theme: from n/a through 4.2.3...

4.3CVSS7AI score0.0019EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:48 p.m.•79 views

CVE-2024-52479

CVE-2024-52479 is a CSRF vulnerability in WordPress theme Jobify (Ben Marshall Job Board). Affected versions are listed as n/a through 4.2.3. Connected sources indicate that a fix exists in version 4.3.0 (Patchstack entry for WordPress Jobify plugin) and that public disclosures/citations referenc...

8.8CVSS7.2AI score0.0019EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/12/02 1:48 p.m.•48 views

CVE-2024-52479 WordPress Jobify plugin < 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Astoundify Jobify jobify allows Cross Site Request Forgery.This issue affects Jobify: from n/a through 4.3.0...

4.3CVSS0.0019EPSS
SaveExploits0References1
Rows per page
Query Builder