Wp Jobsearch
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_jobsearch:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Jobsearch (a002bd29-db9d-5d9c-94f3-1da963181257) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6585 |
vulnerable | 2026-06-08 06:21:55.006267 |
JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE
The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server
Published: 2024-02-27T08:30:25.818Z
Updated: 2024-08-09T20:57:46.541Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6584 |
vulnerable | 2026-06-08 06:21:55.003943 |
JobSearch WP Job Board < 2.3.4 - Authentication Bypass
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address.
Published: 2024-02-27T08:30:26.628Z
Updated: 2025-04-22T16:10:05.518Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1168 |
vulnerable | 2026-06-08 05:39:12.348955 |
JobSearch < 1.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1.
Published: 2022-04-04T15:36:08.000Z
Updated: 2024-08-02T23:55:24.666Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24421 |
vulnerable | 2026-06-08 05:30:04.350636 |
WP JobSearch < 1.7.4 - Authenticated Stored XSS
The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low privilege users to use JavaScript payloads in them and leading to a Stored Cross-Site Scripting issue
Published: 2021-07-12T19:20:56.000Z
Updated: 2024-08-03T19:28:24.004Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.