Advisories · Technology
wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website.
Every CVE that names wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Cross-site scripting (XSS)
- CVSS 8.8 High
WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Path traversal
- CVSS 7.5 High
WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- SQL injection
- CVSS 4.4 Medium
WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WP Job Portal <= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Path traversal
- CVSS 4.3 Medium
WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Broken access control
- CVSS 5.3 Medium
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Broken access control
- CVSS 5.3 Medium
WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Broken access control
- CVSS 5.3 Medium
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Broken access control
- CVSS 4.3 Medium
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Broken access control
- CVSS 4.3 Medium
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Broken access control
- CVSS 4.3 Medium
WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Broken access control
- CVSS 4.3 Medium
WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Broken access control
- CVSS 5.3 Medium
WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Information disclosure
- CVSS 4.9 Medium
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- SQL injection
- CVSS 7.5 High
WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- SQL injection
- CVSS 4.9 Medium
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- SQL injection
- CVSS 4.9 Medium
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- SQL injection
- CVSS 4.8 Medium
WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation
- wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
- Path traversal