281 matches found
Complete Online Job Search System 1.0 - SQL Injection
Complete Online Job Search System 1.0 contains a SQL injection vulnerability via /eris/index.php?q=category&search=. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...
WordPress WP JobSearch <1.5.1 - Cross-Site Scripting
WordPress WP JobSearch plugin prior to 1.5.1 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
CVE-2026-84834
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
EUVD-2026-70565
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84834
CVE-2026-84834 affects the WordPress JobSearch plugin in versions ≤ 3.2.0 . The vulnerability is an unauthenticated PHP Object Injection , allowing a remote attacker with no privileges to potentially achieve high impact on confidentiality, integrity, and availability, as reflected by a CVSS 3.1 s...
CVE-2026-84834 WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Phat RiO in WordPress Plugin JobSearch versions = 3.2.0...
CVE-2026-57383
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Stored XSS.This issue affects JobSearch: from n/a through = 3.2.9...
CVE-2026-57383 WordPress JobSearch plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Stored XSS.This issue affects JobSearch: from n/a through = 3.2.9...
CVE-2026-57383
CVE-2026-57383 affects the WordPress plugin JobSearch (wp-jobsearch) up to version 3.2.9 . The vulnerability is a Stored XSS due to improper neutralization of input during web page generation . Impact details are limited to the XSS outcome stated; the connected documents do not provide exploitati...
WordPress JobSearch plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin JobSearch versions = 3.2.9...
EUVD-2026-37631
Unauthenticated SQL Injection in JobSearch = 3.2.9 versions...
CVE-2026-54186
Unauthenticated SQL Injection in JobSearch = 3.2.9 versions...
CVE-2026-49057
Unauthenticated Broken Access Control in JobSearch = 3.2.7 versions...
CVE-2026-54186 WordPress JobSearch plugin <= 3.2.9 - SQL Injection vulnerability
Unauthenticated SQL Injection in JobSearch = 3.2.9 versions...
CVE-2026-54186
CVE-2026-54186 concerns the WordPress JobSearch plugin, affected version range
CVE-2026-49057
The CVE-2026-49057 entry concerns the WordPress JobSearch plugin (≤ 3.2.7) with Unauthenticated Broken Access Control. Concrete details found: affected software/product is WordPress JobSearch plugin; vulnerable component/condition is broken access control without authentication; impact is describ...
CVE-2026-49057 WordPress JobSearch plugin <= 3.2.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in JobSearch = 3.2.7 versions...
WordPress JobSearch plugin <= 3.2.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin JobSearch versions = 3.2.9...
PT-2026-50124
Name of the Vulnerable Software and Affected Versions JobSearch versions prior to 3.2.8 Description Unauthenticated Broken Access Control allows an attacker to bypass authorization restrictions without providing valid credentials. Recommendations Update to a version newer than 3.2.7...