Wpjobportal vulnerabilities
33 CVEs and advisories name Wpjobportal as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116546WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter
- CVE-2026-65569WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability
- CVE-2026-57653WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability
- CVE-2026-4758WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field
- CVE-2026-4306WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter
- CVE-2026-24941WordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerability
- CVE-2026-24379WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2025-14467WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field
- CVE-2025-14293WP Job Portal <= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read
- CVE-2025-48274WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability
- CVE-2025-47438WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability
- CVE-2025-48273WordPress WP Job Portal plugin <= 2.3.2 - Arbitrary File Download Vulnerability
- CVE-2025-48272WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability
- CVE-2025-26935WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability
- CVE-2024-13873WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection
- CVE-2024-13372WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download
- CVE-2024-13371WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending
- CVE-2024-13428WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion
- CVE-2024-13425WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion
- CVE-2024-13429WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion
- CVE-2024-12131WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference
- CVE-2024-12132WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
- CVE-2024-11712WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download
- CVE-2024-11710WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection
- CVE-2024-11711WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection
- CVE-2024-11714WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()
- CVE-2024-11713WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()
- CVE-2024-11715WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation
- CVE-2024-52389WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-7950WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation