CVE-2023-4490

creationtimestamp| type| source ---|---|--- 2025-04-04 21:02:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3llzcteqcrh23 2025-06-05 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqv7r2bamy2u 2026-06-07 00:00:00+00:00| exploited| The...

WordPress WP Job Portal Plugin <= 2.0.5 is vulnerable to SQL Injection

Software WP Job Portal Type Plugin Vulnerable versions = 2.0.5 Fixed in 2.0.6 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-4490 Patch priority High CVSS severity High 9.3 Developer Ahmad PSID 9b020cd17632 Credits Pablo Sanchez Required privilege Unauthenticated Published 2...

CVE-2023-4490

The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

CVE-2023-4490 WP Job Portal < 2.0.6 - Unauthenticated SQLi

The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

CVE-2023-4490

The CVE-2023-4490 issue affects the WP Job Portal WordPress plugin prior to version 2.0.6. The root cause is failure to sanitise and escape the city parameter before it is used in a SQL statement, enabling unauthenticated SQL injection. Impact is high: potential data exposure or compromise of the...