Simple Job Board Security Vulnerabilities and Issues — Simple Job Board CVE List

Lucene search

PresstigersSimple Job Board

11 matches found

CVE•added 2024/04/09 7:15 p.m.•73 views

CVE-2024-1813

The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If...

9.8CVSS9.6AI score0.06052EPSS

CVE•added 2025/01/02 12:15 p.m.•67 views

CVE-2023-47188

Missing Authorization vulnerability in PressTigers Simple Job Board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through 2.10.5.

9.8CVSS5.4AI score0.00179EPSS

CVE•added 2022/08/22 3:15 p.m.•66 views

CVE-2022-2558

The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations.

5.3CVSS5.2AI score0.00324EPSS

CVE•added 2024/02/21 7:15 a.m.•55 views

CVE-2024-0593

The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can...

5.3CVSS6.3AI score0.00234EPSS

CVE•added 2019/08/13 5:15 p.m.•41 views

CVE-2017-18498

The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.

6.1CVSS6AI score0.0021EPSS

CVE•added 2021/10/21 8:15 p.m.•39 views

CVE-2021-39328

The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable echo'd out via the ~/admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user acces...

5.5CVSS4.8AI score0.00447EPSS

CVE•added 2024/08/24 8:15 a.m.•37 views

CVE-2024-7351

The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP ...

7.2CVSS7AI score0.05228EPSS

CVE•added 2024/01/05 10:15 a.m.•34 views

CVE-2023-52122

Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board.This issue affects Simple Job Board: from n/a through 2.10.6.

8.8CVSS8.6AI score0.0007EPSS

CVE•added 2023/11/10 2:15 p.m.•26 views

CVE-2023-29440

Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board plugin

8.8CVSS8.9AI score0.00096EPSS

CVE•added 2025/05/15 8:15 p.m.•21 views

CVE-2024-7761

In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

6.1CVSS5.8AI score0.00007EPSS

CVE•added 2025/05/15 8:15 p.m.•15 views

CVE-2024-7762

The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes

7.5CVSS6.6AI score0.0009EPSS