240 matches found
WordPress Job Portal < 2.0.6 - SQL Injection
The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape the city parameter before using it in a SQL statement,leading to a SQL injection vulnerability that is exploitable by unauthenticated users. This vulnerability can be used to extractsensitive data from the database or...
CVE-2026-81299
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
CVE-2026-81299
CVE-2026-81299 affects the WordPress WP Job Portal plugin, versions
EUVD-2026-67729
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
CVE-2026-81299 WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
CVE-2026-81299 WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
PT-2026-83147
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
CVE-2026-81299: Authorization Bypass Through User-Controlled Key
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Md Mehedi Hasan in WordPress Plugin WP Job Portal versions = 2.5.9...
CVE-2026-65569
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
PT-2026-68558
Name of the Vulnerable Software and Affected Versions WP Job Portal versions prior to 2.5.7 Description An issue exists in the WP Job Portal plugin for WordPress due to insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. This allows authenticated...
CVE-2026-65569: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
EUVD-2026-44872
The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-level self-registerable account to perform SQL injection attacks...
CVE-2026-12395
The WP Job Portal WordPress plugin, in versions prior to 2.5.5 , contains a vulnerability where a parameter is not properly sanitized or escaped before being used in a SQL query. This flaw allows authenticated users with a subscriber-level (self-registerable) account to perform SQL injection atta...
CVE-2026-12395 WP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' Parameter
The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-level self-registerable account to perform SQL injection attacks...
CVE-2026-12395: Improper Neutralization of Special Elements used in an SQL Command
The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-level self-registerable account to perform SQL injection attacks...
CVE-2026-12396
The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level self-registerable account to approve, feature, or reject arbitrary jobs, including those owned by other user...
CVE-2026-12396: Undefined Security Weakness
The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level self-registerable account to approve, feature, or reject arbitrary jobs, including those owned by other user...
CVE-2026-12397: Undefined Security Weakness
The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level self-registerable account to read other employers' private account email addresses by enumerating job...