Simple Job Board
Approved changes feed: RSS · Atom
cpe:2.3:a:presstigers:simple_job_board:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Presstigers (1cb21d96-6088-5991-8415-d9f9b208dc72) |
|---|---|
| Product | Simple Job Board (f30f7e23-1491-51ea-b5ec-f8f333e942b5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7762 |
vulnerable | 2026-06-08 06:58:23.386104 |
Simple Job Board < 2.12.6 - Unauthenticated Resumes Download
The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes
Published: 2025-05-15T20:07:11.769Z
Updated: 2025-08-29T14:56:24.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7761 |
vulnerable | 2026-06-08 06:58:23.385749 |
Simple Job Board < 2.12.2 - Admin+ Stored XSS
In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor
Published: 2025-05-15T20:07:11.580Z
Updated: 2025-05-17T03:33:50.132Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7351 |
vulnerable | 2026-06-08 06:58:21.998387 |
Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
HIGH (7.2)
The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Published: 2024-08-24T07:33:44.437Z
Updated: 2026-04-08T17:18:13.984Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1813 |
vulnerable | 2026-06-08 06:27:14.581899 |
Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
CRITICAL (9.8)
The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code when a submitted job application is viewed.
Published: 2024-04-09T18:59:06.091Z
Updated: 2026-04-08T17:05:28.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0593 |
vulnerable | 2026-06-08 06:22:01.445902 |
Simple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure
MEDIUM (5.3)
The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.
Published: 2024-02-21T06:47:56.419Z
Updated: 2026-04-08T16:34:36.461Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52122 |
vulnerable | 2026-06-08 06:17:54.298094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47188 |
vulnerable | 2026-06-08 06:14:24.212965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29440 |
vulnerable | 2026-06-08 06:02:40.213721 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2558 |
vulnerable | 2026-06-08 05:43:35.803792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39328 |
vulnerable | 2026-06-08 05:33:50.072041 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18498 |
vulnerable | 2026-06-08 05:09:11.173728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.