CVE-2024-1813

CVE-2024-1813 – Simple Job Board (WordPress) is a PHP Object Injection vulnerability in all versions up to 2.11.0, caused by deserialization of untrusted input in job_board_applicant_list_columns_value. It allows unauthenticated attackers to inject a PHP object; with a POP chain from another plug...

CVE-2023-47188

CVE-2023-47188 affects the WordPress plugin Simple Job Board (versions

CVE-2022-2558

The CVE-2022-2558 issue affects the WordPress plugin Simple Job Board prior to version 2.10.0 . The vulnerability is a directory listing disclosure that allows public access to uploaded resumes in certain configurations. Affected component is the plugin’s file handling in those configurations, en...

CVE-2024-0593

The CVE pertains to the WordPress plugin Simple Job Board . It reports insufficient authorization checks in the function fetch_quick_job() affecting all versions up to and including 2.10.8 , allowing unauthenticated attackers to fetch arbitrary (potentially password‑protected or private) posts co...

CVE-2023-52122

CVE-2023-52122 is a CSRF vulnerability in the WordPress plugin Simple Job Board (affected: Simple Job Board

CVE-2024-7351

CVE-2024-7351 affects the WordPress plugin “Simple Job Board” (versions up to and including 2.12.3). The vulnerability is a PHP Object Injection via deserialization of untrusted input when updating job applications, exploitable by authenticated users with Editor+ privileges. The initial disclosur...

CVE-2021-39328

The WordPress plugin Simple Job Board is affected by CVE-2021-39328: an authenticated stored XSS in versions up to 2.9.4 caused by insufficient escaping of the $job_board_privacy_policy_label in privacy settings (class-simple-job-board-settings-privacy.php). An attacker with administrative access...

CVE-2017-18498

The CVE affects the WordPress Simple Job Board plugin. Affected version range: before 2.4.4 (reported as before 2.4.4; other sources suggest

CVE-2023-29440

CVE-2023-29440 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin Simple Job Board (PressTigers) versions <= 2.10.3. The issue is triggered by unauthenticated CSRF actions (sjb_save_settings_section) that could permit state-changing requests without user intent, as documente...

CVE-2024-7761

The Simple Job Board WordPress plugin versions prior to 2.12.2 is vulnerable to Stored XSS . This flaw allows an attacker to embed malicious scripts on behalf of the editor, potentially leading to an account takeover backdoor . To remediate this, users should update to version 2.12.2 or later. As...

CVE-2024-7762

The Simple Job Board WordPress plugin, in versions prior to 2.12.6 , contains a vulnerability that fails to prevent uploaded files from being listed. This allows unauthenticated users to access and download uploaded resumes. To mitigate this issue, users should update the plugin to version 2.12.6...