Skip to content
Noroxi

eyecix records

16 published records for vendor eyecix.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
37.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2024-8615
    39Monitor

    WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 0%

    eyecix · jobsearch wp job boardNov 6, 2024

  • CVE-2024-11925
    39Monitor

    WP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation

    CriticalCVSS 9.8No exploitEPSS 0%

    eyecix · jobsearch wp job boardNov 28, 2024

  • CVE-2024-47636
    39Monitor

    WordPress WP JobSearch plugin <= 2.5.9 - PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    eyecix · jobsearch wp job boardOct 10, 2024

  • CVE-2024-43931
    39Monitor

    WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    eyecix · jobsearch wp job boardAug 29, 2024

  • CVE-2024-43245
    39Monitor

    WordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    eyecix · jobsearchAug 19, 2024

  • CVE-2024-43929
    39Monitor

    WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    eyecix · jobsearch wp job boardNov 1, 2024

  • CVE-2021-4361
    35Monitor

    JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Arbitrary Options Update

    HighCVSS 8.8No exploitEPSS 1%

    eyecix · jobsearch wp job boardJun 6, 2023

  • CVE-2024-8614
    35Monitor

    WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 0%

    eyecix · jobsearch wp job boardNov 6, 2024

  • CVE-2024-43928
    35Monitor

    WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    eyecix · jobsearch wp job boardNov 1, 2024

  • CVE-2023-6585
    30Monitor

    JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE

    HighCVSS 7.5No exploitEPSS 0%

    eyecix · jobsearch wp job boardFeb 27, 2024

  • CVE-2023-6584
    30Monitor

    JobSearch WP Job Board < 2.3.4 - Authentication Bypass

    HighCVSS 7.5No exploitEPSS 0%

    eyecix · jobsearch wp job boardFeb 27, 2024

  • CVE-2022-1168
    25Monitor

    JobSearch < 1.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

    MediumCVSS 6.1Proof of conceptEPSS 1%

    eyecix · jobsearch wp job boardApr 4, 2022

  • CVE-2022-1169
    24Monitor

    Careerfy < 3.9.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    eyecix · careerfyApr 4, 2022

  • CVE-2021-4352
    21Monitor

    JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Settings Change

    MediumCVSS 5.3No exploitEPSS 0%

    eyecix · jobsearch wp job boardJun 6, 2023

  • CVE-2021-24421
    21Monitor

    WP JobSearch < 1.7.4 - Authenticated Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    eyecix · jobsearch wp job boardJul 12, 2021

  • CVE-2021-4364
    17Monitor

    JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function

    MediumCVSS 4.3No exploitEPSS 0%

    eyecix · jobsearch wp job boardJun 6, 2023