# cve.now: Wpjobportal

The newest entries naming Wpjobportal as an affected vendor (up to 200), of 33 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-116546](https://cve.now/CVE-2026-116546.md): WP Job Portal \<= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter (CVSS 6.4)
- [CVE-2026-65569](https://cve.now/CVE-2026-65569.md): WordPress WP Job Portal plugin \<= 2.5.6 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2026-57653](https://cve.now/CVE-2026-57653.md): WordPress WP Job Portal plugin \<= 2.5.2 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2026-4758](https://cve.now/CVE-2026-4758.md): WP Job Portal \<= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field (CVSS 8.8)
- [CVE-2026-4306](https://cve.now/CVE-2026-4306.md): WP Job Portal \<= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter (CVSS 7.5)
- [CVE-2026-24941](https://cve.now/CVE-2026-24941.md): WordPress WP Job Portal plugin \<= 2.4.4 - Broken Access Control vulnerability (CVSS 7.5)
- [CVE-2026-24379](https://cve.now/CVE-2026-24379.md): WordPress WP Job Portal plugin \<= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3)
- [CVE-2025-14467](https://cve.now/CVE-2025-14467.md): WP Job Portal \<= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field (CVSS 4.4)
- [CVE-2025-14293](https://cve.now/CVE-2025-14293.md): WP Job Portal \<= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read (CVSS 6.5)
- [CVE-2025-48274](https://cve.now/CVE-2025-48274.md): WordPress WP Job Portal plugin \<= 2.3.2 - SQL Injection Vulnerability (CVSS 9.3)
- [CVE-2025-47438](https://cve.now/CVE-2025-47438.md): WordPress WP Job Portal plugin \<= 2.3.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-48273](https://cve.now/CVE-2025-48273.md): WordPress WP Job Portal plugin \<= 2.3.2 - Arbitrary File Download Vulnerability (CVSS 7.5)
- [CVE-2025-48272](https://cve.now/CVE-2025-48272.md): WordPress WP Job Portal plugin \<= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability (CVSS 5.3)
- [CVE-2025-26935](https://cve.now/CVE-2025-26935.md): WordPress WP Job Portal plugin \<= 2.2.8 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2024-13873](https://cve.now/CVE-2024-13873.md): WP Job Portal \<= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection (CVSS 4.3)
- [CVE-2024-13372](https://cve.now/CVE-2024-13372.md): WP Job Portal \<= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download (CVSS 5.3)
- [CVE-2024-13371](https://cve.now/CVE-2024-13371.md): WP Job Portal \<= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending (CVSS 5.3)
- [CVE-2024-13428](https://cve.now/CVE-2024-13428.md): WP Job Portal \<= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion (CVSS 5.3)
- [CVE-2024-13425](https://cve.now/CVE-2024-13425.md): WP Job Portal \<= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion (CVSS 4.3)
- [CVE-2024-13429](https://cve.now/CVE-2024-13429.md): WP Job Portal \<= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion (CVSS 4.3)
- [CVE-2024-12131](https://cve.now/CVE-2024-12131.md): WP Job Portal – A Complete Recruitment System for Company or Job Board website \<= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference (CVSS 4.3)
- [CVE-2024-12132](https://cve.now/CVE-2024-12132.md): WP Job Portal – A Complete Recruitment System for Company or Job Board website \<= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference (CVSS 4.3)
- [CVE-2024-11712](https://cve.now/CVE-2024-11712.md): WP Job Portal \<= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download (CVSS 5.3)
- [CVE-2024-11710](https://cve.now/CVE-2024-11710.md): WP Job Portal \<= 2.2.2 - Authenticated (Admin+) SQL Injection (CVSS 4.9)
- [CVE-2024-11711](https://cve.now/CVE-2024-11711.md): WP Job Portal \<= 2.2.1 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-11714](https://cve.now/CVE-2024-11714.md): WP Job Portal \<= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox() (CVSS 4.9)
- [CVE-2024-11713](https://cve.now/CVE-2024-11713.md): WP Job Portal \<= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal\_deactivate() (CVSS 4.9)
- [CVE-2024-11715](https://cve.now/CVE-2024-11715.md): WP Job Portal \<= 2.2.2 - Missing Authorization to Limited Privilege Escalation (CVSS 4.8)
- [CVE-2024-52389](https://cve.now/CVE-2024-52389.md): WordPress WP Job Portal plugin \<= 2.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-7950](https://cve.now/CVE-2024-7950.md): WP Job Portal \<= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation (CVSS 9.8)
- [CVE-2024-43266](https://cve.now/CVE-2024-43266.md): WordPress WP Job Portal plugin \<= 2.1.8 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4)
- [CVE-2024-35759](https://cve.now/CVE-2024-35759.md): WordPress WP Job Portal plugin \<= 2.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-35760](https://cve.now/CVE-2024-35760.md): WordPress WP Job Portal plugin \<= 2.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/wpjobportal
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.