Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WpjobportalWp Job Portal

13 matches found

CVE
CVE•added 2025/02/25 3:15 p.m.•51 views

CVE-2025-26935

Path Traversal vulnerability in wpjobportal WP Job Portal allows PHP Local File Inclusion. This issue affects WP Job Portal: from n/a through 2.2.8.

8.8CVSS7.6AI score0.00057EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•44 views

CVE-2024-13372

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the getresumefiledownloadbyid() and getallresumefiles() functions due to missing validation on a ...

5.3CVSS5.2AI score0.00059EPSS
CVE
CVE•added 2025/02/22 4:15 a.m.•44 views

CVE-2024-13873

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.8 via the deleteUserPhoto() function due to missing validation on a user controlled key. This makes it ...

4.3CVSS4.3AI score0.00012EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•43 views

CVE-2024-13425

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the enforcedelete() function due to missing validation on a user controlled key. This makes it po...

4.3CVSS4.4AI score0.00045EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•43 views

CVE-2024-13429

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the 'jobenforcedelete' due to missing validation on a user controlled key. This makes it possible...

4.3CVSS4.5AI score0.00045EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•42 views

CVE-2024-13371

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker() function in all versions up to, and including, 2.2.6. This makes it possible...

5.3CVSS5.2AI score0.00129EPSS
CVE
CVE•added 2025/02/01 8:15 a.m.•42 views

CVE-2024-13428

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the deleteCompanyLogo() due to missing validation on a user controlled key. This makes it possibl...

5.3CVSS5.3AI score0.00059EPSS
CVE
CVE•added 2025/01/07 1:15 p.m.•40 views

CVE-2024-12131

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated attacker...

4.3CVSS4.3AI score0.00038EPSS
CVE
CVE•added 2025/05/23 1:15 p.m.•37 views

CVE-2025-47438

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpjobportal WP Job Portal allows PHP Local File Inclusion. This issue affects WP Job Portal: from n/a through 2.3.1.

9.8CVSS8.3AI score0.00165EPSS
CVE
CVE•added 2025/05/23 1:15 p.m.•37 views

CVE-2025-48273

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Portal allows Path Traversal. This issue affects WP Job Portal: from n/a through 2.3.2.

7.5CVSS7.5AI score0.00062EPSS
CVE
CVE•added 2025/01/03 9:15 a.m.•36 views

CVE-2024-12132

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated attacker...

4.3CVSS4.3AI score0.00298EPSS
CVE
CVE•added 2025/05/19 3:15 p.m.•16 views

CVE-2025-48272

Missing Authorization vulnerability in wpjobportal WP Job Portal allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Job Portal: from n/a through 2.3.2.

5.3CVSS5.3AI score0.00042EPSS
CVE
CVE•added 2025/06/17 3:15 p.m.•6 views

CVE-2025-48274

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.3.2.

9.3CVSS9.6AI score0.00037EPSS