wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website vulnerabilities

40 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 25 published in the last 12 months.

Check whether your wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website version is affected

Latest wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website vulnerabilities

CVE-2026-116546 — WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter (CVSS 6.4)
CVE-2026-65569 — WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability (CVSS 8.5)
CVE-2026-12395 — WP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' Parameter (CVSS 6.5)
CVE-2026-12397 — WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR (CVSS 4.3)
CVE-2026-12396 — WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection (CVSS 5.4)
CVE-2026-57653 — WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability (CVSS 8.5)
CVE-2026-4758 — WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field (CVSS 8.8)
CVE-2026-4306 — WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter (CVSS 7.5)
CVE-2026-24941 — WordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerability (CVSS 7.5)
CVE-2026-24379 — WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
CVE-2025-14467 — WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field (CVSS 4.4)
CVE-2025-14293 — WP Job Portal <= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read (CVSS 6.5)
CVE-2025-48274 — WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability (CVSS 7.5)
CVE-2025-48273 — WordPress WP Job Portal plugin <= 2.3.2 - Arbitrary File Download Vulnerability (CVSS 7.5)
CVE-2025-47438 — WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability (CVSS 9.8)
CVE-2025-48272 — WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability (CVSS 5.3)
CVE-2025-26935 — WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability (CVSS 8.8)
CVE-2024-13873 — WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection (CVSS 4.3)
CVE-2024-13429 — WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion (CVSS 4.3)
CVE-2024-13428 — WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion (CVSS 5.3)
CVE-2024-13425 — WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion (CVSS 4.3)
CVE-2024-13372 — WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download (CVSS 5.3)
CVE-2024-13371 — WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending (CVSS 5.3)
CVE-2024-12131 — WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference (CVSS 4.3)
CVE-2024-12132 — WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference (CVSS 4.3)