Approved changes feed: RSS · Atom

cpe:2.3:a:nootheme:jobica_core:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNootheme (605deb65-511e-57cf-a5f4-6d840e31956c)
ProductJobica Core (86727140-9606-580e-9a9a-c3508df1f0bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27049 vulnerable 2026-06-08 07:53:21.862797 WordPress Jobica Core plugin <= 1.4.2 - Account Takeover vulnerability
CRITICAL (9.8)
Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobica Core jobica-core allows Authentication Abuse.This issue affects Jobica Core: from n/a through <= 1.4.2.
Published: 2026-03-25T16:14:53.632Z
Updated: 2026-04-28T16:14:59.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24979 vulnerable 2026-06-08 07:53:18.781927 WordPress Jobica Core plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobica Core jobica-core allows Reflected XSS.This issue affects Jobica Core: from n/a through <= 1.4.1.
Published: 2026-03-25T16:14:35.367Z
Updated: 2026-04-28T16:14:52.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24978 vulnerable 2026-06-08 07:53:18.781465 WordPress Jobica Core plugin <= 1.4.1 - PHP Object Injection vulnerability
HIGH (8.8)
Deserialization of Untrusted Data vulnerability in NooTheme Jobica Core jobica-core allows Object Injection.This issue affects Jobica Core: from n/a through <= 1.4.1.
Published: 2026-03-25T16:14:35.214Z
Updated: 2026-04-28T16:14:52.534Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.