Skip to content
OpenAdvisories

Vendor

WP Job Portal

36 known vulnerabilities.

WP Job Portal at a glance

Last 12 months
9
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 2 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 1 vulnerability March 2026: 2 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 0 vulnerabilities August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202600
Aug 202610
Jul 202600
Jun 202610
May 202600
Apr 202600
Mar 202620
Feb 202610
Jan 202610
Dec 202520
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202511
May 202530
Apr 202500
Mar 202500
Feb 202570
Jan 202520
Dec 202460

Products

WP Job Portal – AI-Powered Recruitment System for Company or Job Board website 20 WP Job Portal 13 WP Job Portal – A Complete Job Board 3
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • Medium 6.4
    CVE-2026-116546

    WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter

    The WP Job Portal – AI-Powered Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'degreetitle' parameter in all versions up to, and including, 2.7.0 due to insufficient input sanitiza…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • High 8.5
    CVE-2026-65569

    WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability

    Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.

    WP Job Portal WP Job Portal
  • High 8.5
    CVE-2026-57653

    WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability

    Contributor SQL Injection in WP Job Portal <= 2.5.2 versions.

    WP Job Portal WP Job Portal
  • High 8.8
    CVE-2026-4758

    WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field

    The WP Job Portal plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'WPJOBPORTALcustomfields::removeFileCustom' function in all versions up to, and including, 2.4.9. This makes it possible for authen…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • High 7.5
    CVE-2026-4306

    WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter

    The WP Job Portal plugin for WordPress is vulnerable to SQL Injection via the 'radius' parameter in all versions up to, and including, 2.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL que…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • High 7.5
    CVE-2026-24941

    WordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through <= 2.4.4.

    WP Job Portal WP Job Portal
  • Medium 4.3
    CVE-2026-24379

    WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through <= 2.4.3.

    WP Job Portal WP Job Portal
  • Medium 4.4
    CVE-2025-14467

    WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field

    The WP Job Portal plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.4.4. This is due to the plugin explicitly whitelisting the `<script>` tag in its `WPJOBPORTAL_ALLOWED_TAGS` configuration and using ins…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 6.5
    CVE-2025-14293

    WP Job Portal <= 2.4.0 - Authenticated (Subscriber+) Arbitrary File Read

    The WP Job Portal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.4.0 via the 'downloadCustomUploadedFile' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, …

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Critical 9.3
    CVE-2025-48274

    WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpjobportal WP Job Portal wp-job-portal allows Blind SQL Injection.This issue affects WP Job Portal: from n/a through <= 2.3.2.

    WP Job Portal WP Job Portal
  • High 8.1
    CVE-2025-47438

    WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through <= 2.3.1.

    WP Job Portal WP Job Portal
  • High 7.5
    CVE-2025-48273

    WordPress WP Job Portal plugin <= 2.3.2 - Arbitrary File Download Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Portal wp-job-portal allows Path Traversal.This issue affects WP Job Portal: from n/a through <= 2.3.2.

    WP Job Portal WP Job Portal
  • Medium 5.3
    CVE-2025-48272

    WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability

    Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through <= 2.3.2.

    WP Job Portal WP Job Portal
  • High 7.5
    CVE-2025-26935

    WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability

    Path Traversal: '.../...//' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through <= 2.2.8.

    WP Job Portal WP Job Portal
  • Medium 4.3
    CVE-2024-13873

    WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.8 via the deleteUserPhoto() function due to missing validation …

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 5.3
    CVE-2024-13371

    WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker() function in all versions up to, and …

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 5.3
    CVE-2024-13428

    WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the deleteCompanyLogo() due to missing validation on a us…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 5.3
    CVE-2024-13372

    WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the getresumefiledownloadbyid() and getallresumefiles() f…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 4.3
    CVE-2024-13425

    WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the enforcedelete() function due to missing validation on…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 4.3
    CVE-2024-13429

    WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the 'jobenforcedelete' due to missing validation on a use…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 4.3
    CVE-2024-12131

    WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This make…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 4.3
    CVE-2024-12132

    WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This make…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 4.9
    CVE-2024-11710

    WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'fieldfor', 'visibleParent' and 'id' parameters in all versions up to, and including, 2.2.2 due to insufficient esca…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 5.3
    CVE-2024-11712

    WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getResumeFileDownloadById() function in all versions up to, and inclu…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • High 7.5
    CVE-2024-11711

    WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'resumeid' parameter in all versions up to, and including, 2.2.1 due to insufficient escaping on the user supplied p…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 4.9
    CVE-2024-11714

    WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'ff' parameter of the getFieldsForVisibleCombobox() function in all versions up to, and including, 2.2.2 due to insu…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 4.9
    CVE-2024-11713

    WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'page_id' parameter of the wpjobportal_deactivate() function in all versions up to, and including, 2.2.2 due to insu…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 4.8
    CVE-2024-11715

    WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the assignUserRole() function in all versions up to, and including, 2.2.2. This m…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 6.5
    CVE-2024-52389

    WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpjobportal WP Job Portal wp-job-portal allows Stored XSS.This issue affects WP Job Portal: from n/a through <= 2.2.0.

    WP Job Portal WP Job Portal
  • Critical 9.8
    CVE-2024-7950

    WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation

    The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusion, Arbitrary Settings Update, and User Creation in all versions up to, and including, 2.1.6 via several functions calle…

    WP Job Portal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Web / CMS
  • Medium 5.4
    CVE-2024-43266

    WordPress WP Job Portal plugin <= 2.1.8 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal.This issue affects WP Job Portal: from n/a through <= 2.1.8.

    WP Job Portal WP Job Portal
  • Medium 5.9
    CVE-2024-35759

    WordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpjobportal WP Job Portal wp-job-portal.This issue affects WP Job Portal: from n/a through <= 2.1.3.

    WP Job Portal WP Job Portal
  • Medium 5.9
    CVE-2024-35760

    WordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpjobportal WP Job Portal wp-job-portal allows DOM-Based XSS.This issue affects WP Job Portal: from n/a through <= 2.1.3.

    WP Job Portal WP Job Portal
  • Medium 5.4
    CVE-2022-41786

    WordPress WP Job Portal Plugin <= 2.0.1 is vulnerable to Broken Access Control

    Missing Authorization vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.1.

    WP Job Portal WP Job Portal – A Complete Job Board
  • Medium 4.3
    CVE-2023-52184

    WordPress WP Job Portal Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.6.

    WP Job Portal WP Job Portal – A Complete Job Board
  • Medium 6.5
    CVE-2023-28534

    WordPress WP Job Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board plugin <= 2.0.0 versions.

    WP Job Portal WP Job Portal – A Complete Job Board