Wwpjobportal

Products

Exploited and recent CVEs

• CVE-2026-116546 Medium 6.4 WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter 0.2%
• CVE-2026-65569 High 8.5 WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability 0.4%
• CVE-2026-57653 High 8.5 WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability 0.4%
• CVE-2026-4758 High 8.8 WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field 0.8%
• CVE-2026-4306 High 7.5 WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter 0.4%
• CVE-2026-24941 High 7.5 WordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerability 0.3%
• CVE-2026-24379 Medium 4.3 WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability 0.3%
• CVE-2025-14467 Medium 4.4 WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field 0.2%
• CVE-2025-14293 Medium 6.5 WP Job Portal <= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read 0.4%
• CVE-2025-48274 Critical 9.3 WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability 0.3%
• CVE-2025-47438 High 8.1 WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability 0.7%
• CVE-2025-48273 High 7.5 WordPress WP Job Portal plugin <= 2.3.2 - Arbitrary File Download Vulnerability 0.5%
• CVE-2025-48272 Medium 5.3 WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability 0.3%
• CVE-2025-26935 High 7.5 WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability 0.7%
• CVE-2024-13873 Medium 4.3 WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection 0.3%
• CVE-2024-13372 Medium 5.3 WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download 0.4%
• CVE-2024-13371 Medium 5.3 WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending 0.5%
• CVE-2024-13428 Medium 5.3 WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion 0.4%
• CVE-2024-13425 Medium 4.3 WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion 0.4%
• CVE-2024-13429 Medium 4.3 WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion 0.4%
• CVE-2024-12131 Medium 4.3 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference 0.3%
• CVE-2024-12132 Medium 4.3 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference 0.4%
• CVE-2024-11712 Medium 5.3 WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download 0.5%
• CVE-2024-11710 Medium 4.9 WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection 0.5%
• CVE-2024-11711 High 7.5 WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection 0.5%
• CVE-2024-11714 Medium 4.9 WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox() 0.5%
• CVE-2024-11713 Medium 4.9 WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate() 0.5%
• CVE-2024-11715 Medium 4.8 WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation 0.5%
• CVE-2024-52389 Medium 6.5 WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-7950 Critical 9.8 WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation 1.2%