wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website

• CVE-2026-116546 Medium 6.4 WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter 0.2%
• CVE-2026-4758 High 8.8 WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field 0.8%
• CVE-2026-4306 High 7.5 WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter 0.4%
• CVE-2025-14467 Medium 4.4 WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field 0.2%
• CVE-2025-14293 Medium 6.5 WP Job Portal <= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read 0.4%
• CVE-2024-13873 Medium 4.3 WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection 0.3%
• CVE-2024-13372 Medium 5.3 WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download 0.4%
• CVE-2024-13371 Medium 5.3 WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending 0.5%
• CVE-2024-13428 Medium 5.3 WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion 0.4%
• CVE-2024-13425 Medium 4.3 WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion 0.4%
• CVE-2024-13429 Medium 4.3 WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion 0.4%
• CVE-2024-12131 Medium 4.3 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference 0.3%
• CVE-2024-12132 Medium 4.3 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference 0.4%
• CVE-2024-11712 Medium 5.3 WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download 0.5%
• CVE-2024-11710 Medium 4.9 WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection 0.5%
• CVE-2024-11711 High 7.5 WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection 0.5%
• CVE-2024-11714 Medium 4.9 WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox() 0.5%
• CVE-2024-11713 Medium 4.9 WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate() 0.5%
• CVE-2024-11715 Medium 4.8 WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation 0.5%
• CVE-2024-7950 Critical 9.8 WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation 1.2%