Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WpjobportalWp Job Portal

28 matches found

CVE
CVE•added 2024/01/17 6:15 p.m.•56 views

CVE-2022-41786

Missing Authorization vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.1.

9.8CVSS9.3AI score0.0009EPSS
CVE
CVE•added 2023/09/25 4:15 p.m.•55 views

CVE-2023-4490

The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

9.8CVSS9.9AI score0.52019EPSS
CVE
CVE•added 2025/02/25 3:15 p.m.•51 views

CVE-2025-26935

Path Traversal vulnerability in wpjobportal WP Job Portal allows PHP Local File Inclusion. This issue affects WP Job Portal: from n/a through 2.2.8.

8.8CVSS7.6AI score0.00095EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•44 views

CVE-2024-13372

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the getresumefiledownloadbyid() and getallresumefiles() functions due to missing validation on a ...

5.3CVSS5.2AI score0.00059EPSS
CVE
CVE•added 2025/02/22 4:15 a.m.•44 views

CVE-2024-13873

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.8 via the deleteUserPhoto() function due to missing validation on a user controlled key. This makes it ...

4.3CVSS4.3AI score0.00012EPSS
CVE
CVE•added 2024/09/04 3:15 a.m.•44 views

CVE-2024-7950

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusion, Arbitrary Settings Update, and User Creation in all versions up to, and including, 2.1.6 via several functions called by the 'checkFormRequest' function. Th...

9.8CVSS9.8AI score0.01182EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•43 views

CVE-2024-13425

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the enforcedelete() function due to missing validation on a user controlled key. This makes it po...

4.3CVSS4.4AI score0.00045EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•43 views

CVE-2024-13429

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the 'jobenforcedelete' due to missing validation on a user controlled key. This makes it possible...

4.3CVSS4.5AI score0.00045EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•42 views

CVE-2024-13371

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker() function in all versions up to, and including, 2.2.6. This makes it possible...

5.3CVSS5.2AI score0.00129EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•42 views

CVE-2024-13428

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the deleteCompanyLogo() due to missing validation on a user controlled key. This makes it possibl...

5.3CVSS5.3AI score0.00059EPSS
CVE
CVE•added 2024/12/14 7:15 a.m.•40 views

CVE-2024-11711

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'resumeid' parameter in all versions up to, and including, 2.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparat...

7.5CVSS7.7AI score0.00791EPSS
CVE
CVE•added 2024/12/14 7:15 a.m.•40 views

CVE-2024-11712

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getResumeFileDownloadById() function in all versions up to, and including, 2.2.2. This makes it possible for ...

5.3CVSS5.2AI score0.00159EPSS
CVE
CVE•added 2025/01/07 1:15 p.m.•40 views

CVE-2024-12131

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated attacker...

4.3CVSS4.3AI score0.00038EPSS
CVE
CVE•added 2024/01/05 8:15 a.m.•38 views

CVE-2023-52184

Cross-Site Request Forgery (CSRF) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.6.

8.8CVSS8.6AI score0.0007EPSS
CVE
CVE•added 2024/12/14 7:15 a.m.•38 views

CVE-2024-11714

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'ff' parameter of the getFieldsForVisibleCombobox() function in all versions up to, and including, 2.2.2 due to insufficient escaping on the user supplied p...

4.9CVSS5.3AI score0.00134EPSS
CVE
CVE•added 2024/06/21 1:15 p.m.•38 views

CVE-2024-35760

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Job Portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.1.3.

5.9CVSS5.7AI score0.0012EPSS
CVE
CVE•added 2024/11/18 10:15 p.m.•38 views

CVE-2024-52389

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Job Portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.2.0.

6.5CVSS6.4AI score0.00034EPSS
CVE
CVE•added 2024/08/18 10:15 p.m.•37 views

CVE-2024-43266

Authorization Bypass Through User-Controlled Key vulnerability in WP Job Portal.This issue affects WP Job Portal: from n/a through 2.1.6.

8.8CVSS5.5AI score0.00233EPSS
CVE
CVE•added 2025/05/23 1:15 p.m.•37 views

CVE-2025-47438

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpjobportal WP Job Portal allows PHP Local File Inclusion. This issue affects WP Job Portal: from n/a through 2.3.1.

9.8CVSS8.3AI score0.00165EPSS
CVE
CVE•added 2025/05/23 1:15 p.m.•37 views

CVE-2025-48273

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Portal allows Path Traversal. This issue affects WP Job Portal: from n/a through 2.3.2.

7.5CVSS7.5AI score0.00062EPSS
CVE
CVE•added 2024/12/14 7:15 a.m.•36 views

CVE-2024-11710

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'fieldfor', 'visibleParent' and 'id' parameters in all versions up to, and including, 2.2.2 due to insufficient escaping on the user supplied parameter and ...

4.9CVSS5.3AI score0.00125EPSS
CVE
CVE•added 2024/12/14 7:15 a.m.•36 views

CVE-2024-11715

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the assignUserRole() function in all versions up to, and including, 2.2.2. This makes it possible for unauthenticated att...

9.8CVSS5AI score0.00201EPSS
CVE
CVE•added 2025/01/03 9:15 a.m.•36 views

CVE-2024-12132

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated attacker...

4.3CVSS4.3AI score0.00298EPSS
CVE
CVE•added 2024/06/21 1:15 p.m.•36 views

CVE-2024-35759

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Job Portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.1.3.

5.9CVSS5.7AI score0.00067EPSS
CVE
CVE•added 2024/12/14 7:15 a.m.•34 views

CVE-2024-11713

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'page_id' parameter of the wpjobportal_deactivate() function in all versions up to, and including, 2.2.2 due to insufficient escaping on the user supplied p...

4.9CVSS5.3AI score0.00134EPSS
CVE
CVE•added 2023/06/22 9:15 a.m.•31 views

CVE-2023-28534

Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board plugin

6.5CVSS5.4AI score0.00077EPSS
CVE
CVE•added 2025/05/19 3:15 p.m.•16 views

CVE-2025-48272

Missing Authorization vulnerability in wpjobportal WP Job Portal allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Job Portal: from n/a through 2.3.2.

5.3CVSS5.3AI score0.0004EPSS
CVE
CVE•added 2025/06/17 3:15 p.m.•5 views

CVE-2025-48274

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.3.2.

9.3CVSS9.6AI score0.00037EPSS