WordPress plugin
Simple Job Board security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High3
- Medium9
- Low0
All Simple Job Board vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Sensitive Information Exposure ≤2.13.7Update to 2.13.8 | CVE-2025-59579 | |
| Medium5.3 | Unauthenticated Resumes Download ≤2.12.5Update to 2.12.16 | CVE-2024-7762 | |
| High7.2 | Authenticated (Editor+) PHP Object Injection ≤2.12.3Update to 2.12.4 | CVE-2024-7351 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤2.12.1Update to 2.12.2 | CVE-2024-7761 | |
| Critical9.8 | Unauthenticated PHP Object Injection via Job Application Fields ≤2.11.0Update to 2.11.1 | CVE-2024-1813 | |
| Medium5.3 | Missing Authorization to Unauthenticated Information Disclosure ≤2.10.8Update to 2.11.0 | CVE-2024-0593 | |
| Medium4.3 | Cross-Site Request Forgery ≤2.10.6Update to 2.10.7 | CVE-2023-52122 | |
| Medium5.8 | Missing Authorization ≤2.10.5Update to 2.10.6 | CVE-2023-47188 | |
| Medium4.3 | Cross-Site Request Forgery via sjb_save_settings_section ≤2.10.3Update to 2.10.4 | CVE-2023-29440 | |
| High7.5 | Information Disclosure ≤2.9.6Update to 2.9.10 | CVE-2022-2558 | |
| High7.7 | Local File Inclusion ≤2.9.3Update to 2.9.4 | CVE-2020-35749 | |
| Medium5.5 | Simple Job Board <= 2.9.4 Authenticated Stored Cross-Site Scripting ≤2.9.4Update to 2.9.5 | CVE-2021-39328 | |
| Medium6.1 | Reflected Cross-Site Scripting <2.4.4Update to 2.4.4 | CVE-2017-18498 |
- Medium5.3Unauthenticated Sensitive Information Exposure
≤2.13.7Update to 2.13.8
- Medium5.3Unauthenticated Resumes Download
≤2.12.5Update to 2.12.16
- High7.2Authenticated (Editor+) PHP Object Injection
≤2.12.3Update to 2.12.4
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤2.12.1Update to 2.12.2
- Critical9.8Unauthenticated PHP Object Injection via Job Application Fields
≤2.11.0Update to 2.11.1
- Medium5.3Missing Authorization to Unauthenticated Information Disclosure
≤2.10.8Update to 2.11.0
- Medium4.3Cross-Site Request Forgery
≤2.10.6Update to 2.10.7
- Medium5.8Missing Authorization
≤2.10.5Update to 2.10.6
- Medium4.3Cross-Site Request Forgery via sjb_save_settings_section
≤2.10.3Update to 2.10.4
- High7.5Information Disclosure
≤2.9.6Update to 2.9.10
- High7.7Local File Inclusion
≤2.9.3Update to 2.9.4
- Medium5.5Simple Job Board <= 2.9.4 Authenticated Stored Cross-Site Scripting
≤2.9.4Update to 2.9.5
- Medium6.1Reflected Cross-Site Scripting
<2.4.4Update to 2.4.4
Simple Job Board: common questions
Does Simple Job Board have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in Simple Job Board: 1 critical, 3 high, 9 medium. None are known to affect version null.
How do I check which version of Simple Job Board I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Simple Job Board vulnerability?
CVE-2025-59579, published Oct 14, 2025: Simple Job Board <= 2.13.7 - Unauthenticated Sensitive Information Exposure. Severity: Medium (CVSS 5.3).
Is any Simple Job Board vulnerability listed in CISA KEV?
No. None of the known Simple Job Board vulnerabilities is currently listed in the CISA KEV catalog.