Advisories · Technology

blueglassch Job Postings.

Every CVE that names blueglassch Job Postings among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18063 CVE record

CVSS 6.4 Medium

Job Postings <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position_button' Parameter
- blueglassch Job Postings
- Cross-site scripting (XSS)
Not analysed yet 15 Sept 2026
CVE-2025-1310 CVE record

CVSS 6.5 Medium

Jobs for WordPress <= 2.7.11 - Authenticated (Subscriber+) Arbitrary File Read
- blueglassch Job Postings
- Path traversal
Not analysed yet 26 Mar 2025
CVE-2024-2833 CVE record

CVSS 6.1 Medium

Jobs for WordPress <= 2.7.5 - Reflected Cross-Site Scripting via job-search
- blueglassch Job Postings
- Cross-site scripting (XSS)
Not analysed yet 18 Apr 2024