Vulnerabilidades em wpjobportal

32 resultados
Análise Vexday

WPJobPortal apresenta um portfólio de 31 vulnerabilidades com apenas 2 críticas, sendo todas elas atualmente sem exploração ativa registrada no KEV. A ameaça é reduzida pela baixa frequência de novos achados (1 CVE nos últimos 90 dias), embora a fraqueza dominante em CWE-639 (controle de autorização inadequado) demande atenção em contextos onde privilégios de usuário são sensíveis.

CVE-2024-13429MEDIUMWP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job DeletionEPSS 0.4%CVE-2025-48274CRITICALWordPress WP Job Portal plugin <= 2.3.2 - SQL Injection VulnerabilityEPSS 0.3%CVE-2024-13873MEDIUMWP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo DisconnectionEPSS 0.3%CVE-2024-35760MEDIUMWordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-12131MEDIUMWP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object ReferenceEPSS 0.3%CVE-2025-48272MEDIUMWordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) VulnerabilityEPSS 0.3%CVE-2024-35759MEDIUMWordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-65569HIGHWordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-24379MEDIUMWordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2024-52389MEDIUMWordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-24941HIGHWordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-14467MEDIUMWP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description FieldEPSS 0.2%