64 matches found
CVE-2024-10105
The Job Postings WordPress plugin before 2.7.11 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-10105
The Job Postings WordPress plugin before 2.7.11 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-10105
The CVE-2024-10105 issue affects the WordPress Job Postings plugin (versions prior to 2.7.11). The root cause is inadequate sanitisation and escaping of certain plugin settings, enabling Stored XSS by high-privilege users (e.g., contributors) even when unfiltered_html is disallowed, including mul...
CVE-2024-10105 Jobs for WordPress < 2.7.11 - Contributor+ Stored XSS
The Job Postings WordPress plugin before 2.7.11 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
PT-2025-12738 · WordPress · Job Postings
Name of the Vulnerable Software and Affected Versions: Job Postings WordPress plugin versions prior to 2.7.11 Description: The issue allows high privilege users, such as contributors, to perform Stored Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise an...
WordPress plugin Job Postings 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
CVE-2025-24061
creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-04-01 01:31:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9812 2025-04-05 17:55:19+00:00| exploited| https://t.me/thehackernews/662...
CVE-2025-2135
creationtimestamp| type| source ---|---|--- 2025-03-10 21:51:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114140348492064450 2025-03-10 23:13:36+00:00| seen| https://t.me/cvedetector/19984 2025-03-10 23:51:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2qmpalcz...
CVE-2025-22225
creationtimestamp| type| source ---|---|--- 2025-03-04 12:31:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6366 2025-03-04 13:00:28+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/114104285789301930 2025-03-04 13:37:08+00:00| seen|...
CVE-2025-27263
creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:59+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285967211575 2025-03-03 18:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljikjr4vn22o 2025-08-19 13:26:45+00:00| seen|...
CVE-2025-0760
creationtimestamp| type| source ---|---|--- 2025-02-26 00:23:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5416 2025-02-26 03:17:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj2g475xfh2s 2025-02-26 03:25:04+00:00| seen| https://t.me/cvedetector/18938 2025-02-26...
CVE-2025-1128
creationtimestamp| type| source ---|---|--- 2025-02-25 04:08:48+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lixyigdwhk22 2025-02-25 05:22:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3liy4malhvv2y 2025-02-25 05:53:23+00:00| seen|...
CVE-2024-56939
creationtimestamp| type| source ---|---|--- 2025-02-12 22:19:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7eb6vi32g 2025-02-12 23:09:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4152 2025-02-13 00:25:58+00:00| seen|...
CVE-2024-57409
creationtimestamp| type| source ---|---|--- 2025-02-10 17:59:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113980891330526605 2025-02-10 18:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtqtshh2b2c 2025-02-14 10:01:38+00:00| seen|...
CVE-2025-1003
creationtimestamp| type| source ---|---|--- 2025-02-04 00:06:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113942696577664891 2025-02-04 00:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcromy62m2b 2025-02-04 02:11:21+00:00| seen|...
CVE-2025-23990
creationtimestamp| type| source ---|---|--- 2025-01-31 09:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzo2737bo2j 2025-01-31 10:15:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3624 2025-01-31 11:11:52+00:00| seen| https://t.me/cvedetector/16922...
CVE-2025-24150
creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxv4zdy22b 2025-01-28 00:23:40+00:00| seen| https://t.me/cvedetector/16540 2025-01-28 00:59:40+00:00| seen|...
CVE-2025-0611
creationtimestamp| type| source ---|---|--- 2025-01-22 19:03:32+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113873558659039214 2025-01-22 20:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lge6oshxps2e 2025-01-22 20:35:00+00:00| seen|...
CVE-2025-24014
creationtimestamp| type| source ---|---|--- 2025-01-20 22:59:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113863162643434691 2025-01-20 23:00:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2373 2025-01-20 23:15:22+00:00| seen|...
CVE-2024-13176
creationtimestamp| type| source ---|---|--- 2025-01-20 13:36:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113860948101305997 2025-01-20 13:59:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2360 2025-01-20 14:15:52+00:00| seen|...