Critical · 9.6 CVE-2023-51545 EUVD-2023-56257GHSA-5gfw-4p9h-vh8j

WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

Published Dec 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ThemeHigh Product: Job Manager & Career – Manage job board listings, and recruitments

Description

Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4.

Affected products

Vendor	Product	Affected	Fixed
ThemeHigh	Job Manager & Career – Manage job board listings, and recruitments	≤ 1.4.4	—

References

https://patchstack.com/database/vulnerability/job-manager-career/wordpress-job-manager-career-plugin-1-4-4-cross-site-request-forgery-csrf-to-php-object-injection-vulnerability?_s_id=cve vdb-entry