Presstigers Simple Job Board vulnerabilities

CVE-2025-59579 [HIGH] CWE-201 CVE-2025-59579: Insertion of Sensitive Information Into Sent Data vulnerability in PressTigers Simple Job Board simp Insertion of Sensitive Information Into Sent Data vulnerability in PressTigers Simple Job Board simple-job-board allows Retrieve Embedded Sensitive Data.This issue affects Simple Job Board: from n/a through <= 2.13.7.

CVE-2024-7761 [MEDIUM] CWE-79 CVE-2024-7761: In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was f In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

CVE-2024-7762 [LOW] CWE-548 CVE-2024-7762: The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being liste The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes

CVE-2023-47188 [CRITICAL] CWE-862 CVE-2023-47188: Missing Authorization vulnerability in PressTigers Simple Job Board allows Exploiting Incorrectly Co Missing Authorization vulnerability in PressTigers Simple Job Board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through 2.10.5.

CVE-2024-7351 [HIGH] CWE-502 CVE-2024-7351: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up t The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable

CVE-2024-1813 [CRITICAL] CWE-502 CVE-2024-1813: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up t The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or

CVE-2024-0593 [MEDIUM] CWE-862 CVE-2024-0593: The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insuf The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitiv

CVE-2023-52122 [HIGH] CWE-352 CVE-2023-52122: Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board.This issue affects S Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board.This issue affects Simple Job Board: from n/a through 2.10.6.

CVE-2023-29440 [HIGH] CWE-352 CVE-2023-29440: Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board plugin <= 2.10.3 ver Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board plugin <= 2.10.3 versions.

CVE-2022-2558 [MEDIUM] CWE-200 CVE-2022-2558: The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations.

CVE-2021-39328 [MEDIUM] CWE-79 CVE-2021-39328: The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficie The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable echo'd out via the ~/admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to

CVE-2017-18498 [MEDIUM] CWE-79 CVE-2017-18498: The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search. The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.