Skip to content
OpenAdvisories

Vendor

EyeCix Technologies

25 known vulnerabilities.

10 results · Clear filters · Feed

  • Critical 9.8

    WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions.

  • Critical 9.3

    WordPress JobSearch plugin <= 3.2.9 - SQL Injection vulnerability

    Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions.

  • Critical 9.3

    WordPress Addon Jobsearch Chat plugin <= 3.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eyecix Addon Jobsearch Chat addon-jobsearch-chat allows SQL Injection.This issue affects Addon Jobsearch Chat: from n/a through <= 3.0.

  • Critical 9.8

    WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8.

  • Critical 9.8

    WP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation

    The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.6.7. This is due to the plugin not properly verifying a users identity when verifying an email address through the user_account_activ…

  • Critical 10.0

    WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload

    The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_location_load_excel_file_callback() function in all versions up to, and including, 2.6.7. This makes it possible for u…

  • Critical 9.9

    WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload

    The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_wp_handle_upload() function in all versions up to, and including, 2.6.7. This makes it possible for authenticated atta…

  • Critical 9.8

    WordPress WP JobSearch plugin <= 2.5.9 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch allows Object Injection.This issue affects JobSearch: from n/a through <= 2.5.9.

  • Critical 9.8

    WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.3.

  • Critical 9.8

    WordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability

    Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4.