Extension WordPress
Vulnérabilités JobBoardWP – Job Board Listings and Submissions
Cette page rassemble les failles publiées pour JobBoardWP – Job Board Listings and Submissions, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de JobBoardWP – Job Board Listings and Submissions
5 fiches
JobBoardWP – Job Board Listings and Submissions <= 1.3.0 – Reflected Cross-Site Scripting
The JobBoardWP – Job Board Listings and Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including,…
*-1.3.0
1.3.1
22/11/2024
JobBoardWP <= 1.2.2 – Missing Authorization to Job Posting Manipulation
The JobBoardWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the actions_listener() function in versions up to, and including, 1.2.2. This makes it possible for authenticated attackers to manipulate other jobs…
*-1.2.2
1.2.3
25/01/2023
JobBoardWP <= 1.2.1 – Unauthenticated Arbitrary File Upload
The JobBoardWP plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in versions up to, and including, 1.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected…
*-1.2.1
1.2.2
28/11/2022
JobBoardWP – Job Board Listings and Submissions <= 1.1.0 – Authenticated (Admin+) Stored Cross-Site Scripting
The JobBoardWP – Job Board Listings and Submissions WordPress plugin may be vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters which allow authenticated attackers with administrative user access to inject arbitrary…
*-1.1.0
1.2.0
26/07/2022
JobBoardWP – Job Board Listings and Submissions <= 1.0.7 – Stored Cross-Site Scripting
The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/includes/admin/class-metabox.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in…
*-1.0.7
1.1.0
15/10/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.