Skip to content
OpenAdvisories

Vendor

sfwebservice

2 known vulnerabilities.

Products

InWave Jobs 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-39477

    WordPress InWave Jobs Plugin <= 3.5.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWave Jobs: from n/a through 3.5.8.

    sfwebservice InWave Jobs
  • Critical 9.8
    CVE-2025-1315

    InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset

    The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it poss…

    sfwebservice InWave Jobs Web / CMS