Eyecix Jobsearch vulnerabilities

12 known vulnerabilities affecting eyecix/jobsearch.

Total CVEs

12

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL5HIGH1MEDIUM1UNKNOWN5

Vulnerabilities

Page 1 of 1

CVE-2026-32493UNKNOWN≥ n/a, ≤ <= 3.2.02026-03-25

CVE-2026-32493 CWE-79 CVE-2026-32493: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through <= 3.2.0.

CVE-2025-62025CRITICALCVSS 9.8≤ 3.0.82025-10-22

CVE-2025-62025 [CRITICAL] CWE-502 CVE-2025-62025: Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8.

CVE-2025-52806UNKNOWN≤ 3.0.82025-08-14

CVE-2025-52806 CWE-98 CVE-2025-52806: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in eyecix JobSearch wp-jobsearch allows PHP Local File Inclusion.This issue affects JobSearch: from n/a through < 3.0.8.

CVE-2025-52798UNKNOWN≤ 3.0.62025-07-04

CVE-2025-52798 CWE-79 CVE-2025-52798: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through < 3.0.6.

CVE-2025-49978UNKNOWN≤ 3.0.62025-06-20

CVE-2025-49978 CWE-639 CVE-2025-49978: Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allo Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through < 3.0.6.

CVE-2024-43929CRITICALCVSS 9.8≥ n/a, ≤ 2.5.42024-11-01

CVE-2024-43929 [CRITICAL] CWE-862 CVE-2024-43929: Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4.

CVE-2024-43928HIGHCVSS 8.8≥ n/a, ≤ 2.5.42024-11-01

CVE-2024-43928 [HIGH] CWE-862 CVE-2024-43928: Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Acc Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4.

CVE-2024-43930MEDIUMCVSS 4.3≥ n/a, ≤ 2.5.32024-10-31

CVE-2024-43930 [MEDIUM] CWE-352 CVE-2024-43930: Cross-Site Request Forgery (CSRF) vulnerability in eyecix JobSearch allows Cross Site Request Forger Cross-Site Request Forgery (CSRF) vulnerability in eyecix JobSearch allows Cross Site Request Forgery.This issue affects JobSearch: from n/a through 2.5.3.

CVE-2024-47636CRITICALCVSS 9.8≤ 2.5.92024-10-10

CVE-2024-47636 [CRITICAL] CWE-502 CVE-2024-47636: Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch allows Object Injec Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch allows Object Injection.This issue affects JobSearch: from n/a through <= 2.5.9.

CVE-2024-47394UNKNOWN≤ 2.5.92024-10-05

CVE-2024-47394 CWE-79 CVE-2024-47394: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through <= 2.5.9.

CVE-2024-43931CRITICALCVSS 9.8≥ n/a, ≤ 2.5.32024-08-29

CVE-2024-43931 [CRITICAL] CWE-502 CVE-2024-43931: Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This iss Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.3.

CVE-2024-43245CRITICALCVSS 9.8≥ n/a, ≤ 2.3.42024-08-19

CVE-2024-43245 [CRITICAL] CWE-269 CVE-2024-43245: Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This iss Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4.