Wp Job Portal
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_job_portal:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Job Portal (3fed351c-7b30-532f-83c5-5acbe80bc275) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12397 |
vulnerable | 2026-07-29 00:23:32.291627 |
WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR
The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level (self-registerable) account to read other employers' private account email addresses by enumerating job identifiers.
Published: 2026-07-13T06:00:02.978Z
Updated: 2026-07-13T15:06:41.839Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12396 |
vulnerable | 2026-07-29 00:23:32.291506 |
WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection
The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to approve, feature, or reject arbitrary jobs, including those owned by other users.
Published: 2026-07-13T06:00:02.757Z
Updated: 2026-07-13T15:11:37.263Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12395 |
vulnerable | 2026-07-29 00:23:32.291244 |
WP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' Parameter
The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-level (self-registerable) account to perform SQL injection attacks.
Published: 2026-07-16T06:00:03.242Z
Updated: 2026-07-16T15:33:42.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4490 |
vulnerable | 2026-06-08 06:16:12.747090 |
WP Job Portal < 2.0.6 - Unauthenticated SQLi
The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users
Published: 2023-09-25T15:56:52.472Z
Updated: 2025-04-23T16:16:01.115Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.