70 matches found
WordPress js-jobs plugin cross-site request forgery vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. js-jobs is a recruitment/job search plugin used in it. WordPress js-jobs plugin has a cross-site request forgery vulnerability. Th...
CVE-2018-20974
The js-jobs plugin before 1.0.7 for WordPress has CSRF...
Cross site request forgery (csrf)
The js-jobs plugin before 1.0.7 for WordPress has CSRF...
CVE-2018-20974
CVE-2018-20974 affects the WordPress plugin js-jobs (JS Job Manager) prior to version 1.0.7. The root cause is CSRF due to insufficient verification of trusted-user requests, enabling forgery of cross-site actions. Impact details are limited to what is stated in the sources (CSRF with potential f...
WordPress WP Jobs Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WP Jobs plugin is one of the post management plugin. A cross-site scripting vulnerability exists in version 1.5 of...
CVE-2017-14751
The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field...
WordPress WP Jobs Plugin SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WP Jobs plugin is one of the post management plugin. A SQL injection vulnerability exists in WordPress WP Jobs plug...
CVE-2017-9603
SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php...
CVE-2017-9603
Summary: CVE-2017-9603 is a SQL injection vulnerability in the WP Jobs WordPress plugin (versions before 1.5). The issue allows authenticated users to execute arbitrary SQL commands via the jobid parameter in wp-admin/edit.php. The PoC demonstrates crafting a UNION-based payload (e.g., jobid=5 UN...
