64 matches found
CVE-2024-43929
Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4...
CVE-2024-43928
Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4...
CVE-2024-43929
Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4...
CVE-2024-43928
Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4...
CVE-2024-43928
CVE-2024-43928 is reported as a Missing Authorization vulnerability in the WordPress JobSearch WP Job Board plugin (
CVE-2024-43929
CVE-2024-43929: WordPress JobSearch WP Job Board
CVE-2024-43930
Cross-Site Request Forgery CSRF vulnerability in eyecix JobSearch allows Cross Site Request Forgery.This issue affects JobSearch: from n/a through 2.5.3...
CVE-2024-43930
CVE-2024-43930 is a CSRF vulnerability affecting eyecix JobSearch (WordPress plugin for JobSearch WP Job Board) with affected versions listed as n/a through 2.5.3. The vulnerability is described as a Cross-Site Request Forgery issue; CVSS v3.1 base score is 4.3 (Medium) with Network attack vector...
PT-2024-30791 · Eyecix · Eyecix Jobsearch
Name of the Vulnerable Software and Affected Versions: eyecix JobSearch versions n/a through 2.5.3 Description: A Cross-Site Request Forgery CSRF issue affects eyecix JobSearch, allowing an attacker to forge requests on a user's behalf. This can lead to unauthorized actions being performed withou...
CVE-2024-47636
Deserialization of Untrusted Data vulnerability in Eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.9...
CVE-2024-47636
Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch allows Object Injection.This issue affects JobSearch: from n/a through = 2.5.9...
CVE-2024-47636 WordPress WP JobSearch plugin <= 2.5.9 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch allows Object Injection.This issue affects JobSearch: from n/a through = 2.5.9...
PT-2024-32694 · Eyecix · Eyecix Jobsearch
Name of the Vulnerable Software and Affected Versions: Eyecix JobSearch versions n/a through 2.5.9 Description: The issue is related to Deserialization of Untrusted Data, allowing Object Injection in Eyecix JobSearch. This enables potential remote attacks on affected systems. Recommendations: For...
CVE-2024-47394
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through = 2.5.9...
CVE-2024-43931
Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.3...
CVE-2024-43931
Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.3...
PT-2024-30792 · Eyecix · Eyecix Jobsearch
Name of the Vulnerable Software and Affected Versions: eyecix JobSearch versions n/a through 2.5.3 Description: The issue is related to Deserialization of Untrusted Data, allowing Object Injection in eyecix JobSearch. This problem enables an attacker to inject malicious objects, potentially leadi...
CVE-2024-43245
Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4...
CVE-2024-43245
Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4...
CVE-2024-43245
CVE-2024-43245 affects the WordPress plugin JobSearch (WP Job Board). The issue is an Improper Privilege Management that enables an Authentication Bypass to Account Takeover , potentially allowing an attacker to gain control of user accounts. Affected scope: JobSearch versions from n/a up to and ...