Skip to content
Noroxi

WP Job Portal – AI-Powered Recruitment System for Company or Job Board website

wp-job-portal · plugin

Known security vulnerabilities for WP Job Portal – AI-Powered Recruitment System for Company or Job Board website. Find out in seconds which version runs on your site with WP Lens.

38 known vulnerabilities

5 critical · latest Aug 28, 2026

Vulnerabilities

  • CVE-2025-47438

    WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability

    Critical 9.8

  • CVE-2024-11715

    WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation

    Critical 9.8

  • CVE-2024-7950

    WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation

    Critical 9.8

  • CVE-2022-41786

    WordPress WP Job Portal Plugin <= 2.0.1 is vulnerable to Broken Access Control

    Critical 9.8

  • CVE-2026-42684

    WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability

    Critical 9.3

  • CVE-2026-4758

    WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field

    High 8.8

  • CVE-2025-26935

    WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability

    High 8.8

  • CVE-2024-43266

    WordPress WP Job Portal plugin <= 2.1.8 - Insecure Direct Object References (IDOR) vulnerability

    High 8.8

  • CVE-2023-52184

    WordPress WP Job Portal Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

    High 8.8

  • CVE-2026-65569

    WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability

    High 8.5

  • CVE-2026-57653

    WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability

    High 8.5

  • CVE-2026-4306

    WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter

    High 7.5

  • CVE-2026-24941

    WordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerability

    High 7.5

  • CVE-2025-48274

    WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability

    High 7.5

  • CVE-2025-48273

    WordPress WP Job Portal plugin <= 2.3.2 - Arbitrary File Download Vulnerability

    High 7.5

  • CVE-2024-11711

    WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection

    High 7.5

  • CVE-2026-42685

    WordPress WP Job Portal plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-48880

    WordPress WP Job Portal plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-24379

    WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability

    Medium 6.5

  • CVE-2025-14293

    WP Job Portal <= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read

    Medium 6.5

  • CVE-2024-52389

    WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2023-28534

    WordPress WP Job Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

    Medium 5.4

  • CVE-2025-48272

    WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability

    Medium 5.3

  • CVE-2024-13428

    WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion

    Medium 5.3

  • CVE-2024-13372

    WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download

    Medium 5.3

  • CVE-2024-13371

    WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending

    Medium 5.3

  • CVE-2024-11712

    WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download

    Medium 5.3

  • CVE-2024-11714

    WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()

    Medium 4.9

  • CVE-2024-11713

    WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()

    Medium 4.9

  • CVE-2024-11710

    WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection

    Medium 4.9

  • CVE-2024-35760

    WordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

    Medium 4.8

  • CVE-2024-35759

    WordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

    Medium 4.8

  • CVE-2025-14467

    WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field

    Medium 4.4

  • CVE-2026-81299

    WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

    Medium 4.3

  • CVE-2024-13873

    WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection

    Medium 4.3

  • CVE-2024-13429

    WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion

    Medium 4.3

  • CVE-2024-13425

    WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion

    Medium 4.3

  • CVE-2024-12131

    WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference

    Medium 4.3

← Back to directory