WP Job Portal – AI-Powered Recruitment System for Company or Job Board website

Güvenlik açıkları

• CVE-2025-47438kimlik doğrulamasız≤ 2.3.1

  WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability

  Kritik 9.8

• CVE-2024-11715kimlik doğrulamasız≤ 2.2.2

  WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation

  Kritik 9.8

• CVE-2024-7950kimlik doğrulamasız≤ 2.1.6

  WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation

  Kritik 9.8

• CVE-2022-41786kimlik doğrulamasız · tıklama gerekir≤ 2.0.1

  WordPress WP Job Portal Plugin <= 2.0.1 is vulnerable to Broken Access Control

  Kritik 9.8

• CVE-2026-42684kimlik doğrulamasız≤ 2.5.1

  WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2023-52184kimlik doğrulamasız · tıklama gerekir≤ 2.0.6

  WordPress WP Job Portal Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2026-4758abone+≤ 2.4.9

  WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field

  Yüksek 8.8

• CVE-2025-26935giriş gerekir≤ 2.2.8

  WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability

  Yüksek 8.8

• CVE-2024-43266giriş gerekir≤ 2.1.8

  WordPress WP Job Portal plugin <= 2.1.8 - Insecure Direct Object References (IDOR) vulnerability

  Yüksek 8.8

• CVE-2026-65569abone+≤ 2.5.6

  WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2026-57653katılımcı+≤ 2.5.2

  WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2026-4306kimlik doğrulamasız≤ 2.4.8

  WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter

  Yüksek 7.5

• CVE-2026-24941kimlik doğrulamasız≤ 2.4.4

  WordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2025-48274kimlik doğrulamasız≤ 2.3.2

  WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability

  Yüksek 7.5

• CVE-2025-48273kimlik doğrulamasız≤ 2.3.2

  WordPress WP Job Portal plugin <= 2.3.2 - Arbitrary File Download Vulnerability

  Yüksek 7.5

• CVE-2024-11711kimlik doğrulamasız≤ 2.2.1

  WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection

  Yüksek 7.5

• CVE-2026-42685kimlik doğrulamasız · tıklama gerekir≤ 2.5.1

  WordPress WP Job Portal plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-48880abone+≤ 2.5.2

  WordPress WP Job Portal plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-24379giriş gerekir≤ 2.4.3

  WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability

  Orta 6.5

• CVE-2025-14293abone+≤ 2.4.0

  WP Job Portal <= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read

  Orta 6.5

• CVE-2024-52389giriş gerekir≤ 2.2.0

  WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2023-28534abone+≤ 2.0.0

  WordPress WP Job Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2025-48272kimlik doğrulamasız≤ 2.3.2

  WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability

  Orta 5.3

• CVE-2024-13428kimlik doğrulamasız≤ 2.2.6

  WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion

  Orta 5.3

• CVE-2024-13372kimlik doğrulamasız≤ 2.2.6

  WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download

  Orta 5.3

• CVE-2024-13371kimlik doğrulamasız≤ 2.2.6

  WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending

  Orta 5.3

• CVE-2024-11712kimlik doğrulamasız≤ 2.2.2

  WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download

  Orta 5.3

• CVE-2024-11714yönetici≤ 2.2.2

  WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()

  Orta 4.9

• CVE-2024-11713yönetici≤ 2.2.2

  WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()

  Orta 4.9

• CVE-2024-11710yönetici≤ 2.2.2

  WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection

  Orta 4.9

• CVE-2024-35760yüksek yetki≤ 2.1.3

  WordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2024-35759yüksek yetki≤ 2.1.3

  WordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2025-14467editör+≤ 2.3.9

  WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field

  Orta 4.4

• CVE-2026-81299abone+≤ 2.5.9

  WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

  Orta 4.3

• CVE-2024-13873abone+≤ 2.2.8

  WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection

  Orta 4.3

• CVE-2024-13429giriş gerekir≤ 2.2.6

  WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion

  Orta 4.3

• CVE-2024-13425giriş gerekir≤ 2.2.6

  WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion

  Orta 4.3

• CVE-2024-12131abone+≤ 2.2.5

  WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference

  Orta 4.3