WP Job Portal – AI-Powered Recruitment System for Company or Job Board website

Уязвимости

• CVE-2025-47438без авторизации≤ 2.3.1

  WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability

  Критич. 9.8

• CVE-2024-11715без авторизации≤ 2.2.2

  WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation

  Критич. 9.8

• CVE-2024-7950без авторизации≤ 2.1.6

  WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation

  Критич. 9.8

• CVE-2022-41786без авторизации · нужен клик≤ 2.0.1

  WordPress WP Job Portal Plugin <= 2.0.1 is vulnerable to Broken Access Control

  Критич. 9.8

• CVE-2026-42684без авторизации≤ 2.5.1

  WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2023-52184без авторизации · нужен клик≤ 2.0.6

  WordPress WP Job Portal Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2026-4758подписчик+≤ 2.4.9

  WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field

  Высокий 8.8

• CVE-2025-26935нужен вход≤ 2.2.8

  WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability

  Высокий 8.8

• CVE-2024-43266нужен вход≤ 2.1.8

  WordPress WP Job Portal plugin <= 2.1.8 - Insecure Direct Object References (IDOR) vulnerability

  Высокий 8.8

• CVE-2026-65569подписчик+≤ 2.5.6

  WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-57653участник+≤ 2.5.2

  WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-4306без авторизации≤ 2.4.8

  WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter

  Высокий 7.5

• CVE-2026-24941без авторизации≤ 2.4.4

  WordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2025-48274без авторизации≤ 2.3.2

  WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability

  Высокий 7.5

• CVE-2025-48273без авторизации≤ 2.3.2

  WordPress WP Job Portal plugin <= 2.3.2 - Arbitrary File Download Vulnerability

  Высокий 7.5

• CVE-2024-11711без авторизации≤ 2.2.1

  WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection

  Высокий 7.5

• CVE-2026-42685без авторизации · нужен клик≤ 2.5.1

  WordPress WP Job Portal plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-48880подписчик+≤ 2.5.2

  WordPress WP Job Portal plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-24379нужен вход≤ 2.4.3

  WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability

  Средний 6.5

• CVE-2025-14293подписчик+≤ 2.4.0

  WP Job Portal <= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read

  Средний 6.5

• CVE-2024-52389нужен вход≤ 2.2.0

  WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2023-28534подписчик+≤ 2.0.0

  WordPress WP Job Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2025-48272без авторизации≤ 2.3.2

  WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability

  Средний 5.3

• CVE-2024-13428без авторизации≤ 2.2.6

  WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion

  Средний 5.3

• CVE-2024-13372без авторизации≤ 2.2.6

  WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download

  Средний 5.3

• CVE-2024-13371без авторизации≤ 2.2.6

  WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending

  Средний 5.3

• CVE-2024-11712без авторизации≤ 2.2.2

  WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download

  Средний 5.3

• CVE-2024-11714админ≤ 2.2.2

  WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()

  Средний 4.9

• CVE-2024-11713админ≤ 2.2.2

  WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()

  Средний 4.9

• CVE-2024-11710админ≤ 2.2.2

  WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection

  Средний 4.9

• CVE-2024-35760высокие права≤ 2.1.3

  WordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2024-35759высокие права≤ 2.1.3

  WordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2025-14467редактор+≤ 2.3.9

  WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field

  Средний 4.4

• CVE-2026-81299подписчик+≤ 2.5.9

  WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

  Средний 4.3

• CVE-2024-13873подписчик+≤ 2.2.8

  WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection

  Средний 4.3

• CVE-2024-13429нужен вход≤ 2.2.6

  WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion

  Средний 4.3

• CVE-2024-13425нужен вход≤ 2.2.6

  WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion

  Средний 4.3

• CVE-2024-12131подписчик+≤ 2.2.5

  WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference

  Средний 4.3