Extension WordPress
Vulnérabilités Simple Job Board
Cette page rassemble les failles publiées pour Simple Job Board, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Simple Job Board
13 fiches
Simple Job Board <= 2.13.7 – Unauthenticated Sensitive Information Exposure
The Simple Job Board plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.13.7. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.
*-2.13.7
2.13.8
14/10/2025
Simple Job Board <= 2.12.5 – Unauthenticated Resumes Download
The Simple Job Board plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.12.5 due to insufficient access controls placed on the 'wp-content/uploads/jobpost/[YEAR]' directory. This makes it possible for unauthenticated attackers to…
*-2.12.5
2.12.16
13/09/2024
Simple Job Board <= 2.12.3 – Authenticated (Editor+) PHP Object Injection
The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with…
*-2.12.3
2.12.4
23/08/2024
Simple Job Board <= 2.12.1 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Simple Job Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-2.12.1
2.12.2
04/07/2024
Simple Job Board <= 2.11.0 – Unauthenticated PHP Object Injection via Job Application Fields
The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to…
*-2.11.0
2.11.1
15/03/2024
Simple Job Board <= 2.10.8 – Missing Authorization to Unauthenticated Information Disclosure
The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers…
*-2.10.8
2.11.0
20/02/2024
Simple Job Board <= 2.10.6 – Cross-Site Request Forgery
The Simple Job Board plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10.6. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible…
*-2.10.6
2.10.7
28/12/2023
Simple Job Board <= 2.10.5 – Missing Authorization
The Simple Job Board plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.10.5. This makes it possible for unauthenticated attackers to perform…
*-2.10.5
2.10.6
03/11/2023
Simple Job Board <= 2.10.3 – Cross-Site Request Forgery via sjb_save_settings_section
The Simple Job Board plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.3. This is due to missing or incorrect nonce validation on the sjb_save_settings_section function. This makes it possible for…
*-2.10.3
2.10.4
07/04/2023
Simple Job Board <= 2.9.6 – Information Disclosure
The plugin Simple Job Board for WordPress is vulnerable to Information Disclosure in versions up to, and including, 2.9.6. This makes it possible for attackers do extract sensitive information such as resumes.
*-2.9.6
2.9.10
01/08/2022
Simple Job Board <= 2.9.3 – Local File Inclusion
Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.
*-2.9.3
2.9.4
06/02/2022
Simple Job Board <= 2.9.4 Authenticated Stored Cross-Site Scripting
The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable echo'd out via the ~/admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access to inject arbitrary web scripts,…
*-2.9.4
2.9.5
21/10/2021
Simple Job Board <= 2.4.4 – Reflected Cross-Site Scripting
The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.
[*, 2.4.4)
2.4.4
19/04/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.