Approved changes feed: RSS · Atom

cpe:2.3:a:presstigers:simple_job_board:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPresstigers (1cb21d96-6088-5991-8415-d9f9b208dc72)
ProductSimple Job Board (f30f7e23-1491-51ea-b5ec-f8f333e942b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/simple-job-board purl2cpe 2026-06-01 10:14:42.444796
pkg:github/wpplugins/simple-job-board purl2cpe 2026-06-01 10:14:42.444800

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59579 vulnerable 2026-06-08 07:35:22.371454 WordPress Simple Job Board plugin <= 2.13.7 - Sensitive Data Exposure vulnerability
HIGH (7.5)
Insertion of Sensitive Information Into Sent Data vulnerability in PressTigers Simple Job Board simple-job-board allows Retrieve Embedded Sensitive Data.This issue affects Simple Job Board: from n/a through <= 2.13.7.
Published: 2025-10-22T14:32:39.279Z
Updated: 2026-04-29T09:51:56.610Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7351 vulnerable 2026-06-08 06:58:21.997215 Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
HIGH (7.2)
The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Published: 2024-08-24T07:33:44.437Z
Updated: 2026-04-08T17:18:13.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1813 vulnerable 2026-06-08 06:27:14.579883 Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
CRITICAL (9.8)
The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code when a submitted job application is viewed.
Published: 2024-04-09T18:59:06.091Z
Updated: 2026-04-08T17:05:28.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0593 vulnerable 2026-06-08 06:22:01.444666 Simple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure
MEDIUM (5.3)
The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.
Published: 2024-02-21T06:47:56.419Z
Updated: 2026-04-08T16:34:36.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52122 vulnerable 2026-06-08 06:17:54.296872 WordPress Simple Job Board Plugin <= 2.10.6 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board.This issue affects Simple Job Board: from n/a through 2.10.6.
Published: 2024-01-05T09:11:40.845Z
Updated: 2026-04-28T16:09:05.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47188 vulnerable 2026-06-08 06:14:24.211417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29440 vulnerable 2026-06-08 06:02:40.212729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.