Advisories · Technology
WP JobHunt.
Every CVE that names WP JobHunt among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.6 High
WP JobHunt <= 7.7 - Missing Authorization to Authenticated (Candidate+) Stored Cross-Site Scripting via 'status'
- WP JobHunt
- Broken access control
- CVSS 4.3 Medium
WP JobHunt <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference
- WP JobHunt
- Broken access control
- CVSS 5.4 Medium
WP JobHunt <= 7.6 Authenticated (Custom+) Authorization Bypass
- WP JobHunt
- Broken access control
- CVSS 6.4 Medium
WP JobHunt <= 7.6 - Authenticated (Candidate+) Stored Cross-Site Scripting via ‘cs_job_title’
- WP JobHunt
- Cross-site scripting (XSS)
- CVSS 8.1 High
WP JobHunt <= 7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Account Deletion
- WP JobHunt
- CWE-20
- CVSS 7.5 High
WP JobHunt <= 7.1 - Authentication Bypass to Candidate
- WP JobHunt
- CWE-289
- CVSS 9.8 CriticalCritical · CVSS 9+
WP JobHunt <= 7.1 - Authentication Bypass
- WP JobHunt
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
- WP JobHunt
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover
- WP JobHunt
- Broken access control