Eyecix Jobsearch Wp Job Board — known CVE vulnerabilities

Every CVE whose affected-product data names Eyecix Jobsearch Wp Job Board, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2024-8615 — CVSS 10.0 (critical): The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
• CVE-2024-8614 — CVSS 9.9 (critical): The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
• CVE-2024-43931 — CVSS 9.8 (critical): Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through…
• CVE-2024-47636 — CVSS 9.8 (critical): Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch allows Object Injection.This issue affects JobSearch: from…
• CVE-2021-4361 — CVSS 8.8 (high): The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the…
• CVE-2023-6585 — CVSS 7.5 (high): The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to…
• CVE-2023-6584 — CVSS 7.5 (high): The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that…
• CVE-2024-43929 — CVSS 6.5 (medium): Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects…
• CVE-2022-1168 — CVSS 6.1 (medium): There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1.
• CVE-2024-43928 — CVSS 5.4 (medium): Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
• CVE-2021-24421 — CVSS 5.4 (medium): The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before…
• CVE-2021-4352 — CVSS 5.3 (medium): The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the…
• CVE-2021-4364 — CVSS 4.3 (medium): The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the…