Jobsearch Wp Job Board@* Security Vulnerabilities and Issues — Jobsearch Wp Job Board@* CVE List

Lucene search

EyecixJobsearch Wp Job Board*

12 matches found

CVE•added 2024/02/27 9:15 a.m.•3817 views

CVE-2023-6585

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

7.5CVSS7.7AI score0.00386EPSS

CVE•added 2024/02/27 9:15 a.m.•3610 views

CVE-2023-6584

The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address.

7.5CVSS7.5AI score0.00281EPSS

CVE•added 2024/11/06 9:15 a.m.•114 views

CVE-2024-8614

The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_wp_handle_upload() function in all versions up to, and including, 2.6.7. This makes it possible for authenticated attackers, with subscriber-level access and ...

9.9CVSS9.5AI score0.03707EPSS

CVE•added 2024/11/06 9:15 a.m.•54 views

CVE-2024-8615

The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_location_load_excel_file_callback() function in all versions up to, and including, 2.6.7. This makes it possible for unauthenticated attackers to upload arbit...

10CVSS9.9AI score0.12586EPSS

CVE•added 2024/11/28 7:15 a.m.•52 views

CVE-2024-11925

The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.6.7. This is due to the plugin not properly verifying a users identity when verifying an email address through the user_account_activation function. This makes it possible f...

9.8CVSS9.6AI score0.00116EPSS

CVE•added 2024/08/29 3:15 p.m.•45 views

CVE-2024-43931

Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.3.

9.8CVSS9.6AI score0.00534EPSS

CVE•added 2024/11/01 3:15 p.m.•44 views

CVE-2024-43928

Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4.

8.8CVSS6.3AI score0.0013EPSS

CVE•added 2024/10/31 10:15 a.m.•44 views

CVE-2024-43930

Cross-Site Request Forgery (CSRF) vulnerability in eyecix JobSearch allows Cross Site Request Forgery.This issue affects JobSearch: from n/a through 2.5.3.

4.3CVSS4.6AI score0.0003EPSS

CVE•added 2024/10/10 6:15 p.m.•44 views

CVE-2024-47636

Deserialization of Untrusted Data vulnerability in Eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.9.

9.8CVSS9.6AI score0.00716EPSS

CVE•added 2024/10/05 3:15 p.m.•43 views

CVE-2024-47394

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in eyecix JobSearch allows Reflected XSS.This issue affects JobSearch: from n/a through 2.5.9.

7.1CVSS7.2AI score0.00093EPSS

CVE•added 2024/08/19 6:15 p.m.•40 views

CVE-2024-43245

Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4.

9.8CVSS9.6AI score0.00317EPSS

CVE•added 2024/11/01 3:15 p.m.•35 views

CVE-2024-43929

Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4.

9.8CVSS7.2AI score0.00159EPSS