WordPress plugin
JobSearch WP Job Board security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical8
- High8
- Medium19
- Low0
All JobSearch WP Job Board vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Unauthenticated PHP Object Injection ≤3.2.0No patch available | CVE-2026-84834 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤3.2.9Update to 3.3.0 | CVE-2026-57383 | |
| High7.5 | Unauthenticated SQL Injection ≤3.2.9Update to 3.3.0 | CVE-2026-54186 | |
| Medium5.3 | Missing Authorization ≤3.2.7Update to 3.2.8 | CVE-2026-49057 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.2.0Update to 3.2.2 | CVE-2026-32493 | |
| High8.1 | Unauthenticated PHP Object Injection <3.0.8Update to 3.0.8 | CVE-2025-62025 | |
| High7.5 | Authenticated (Subscriber+) Local File Inclusion <3.0.8Update to 3.0.8 | CVE-2025-52806 | |
| Medium6.1 | Reflected Cross-Site Scripting <3.0.6Update to 3.0.6 | CVE-2025-52798 | |
| Medium4.3 | Authenticated (Subscriber+) Insecure Direct Object Reference <3.0.6Update to 3.0.6 | CVE-2025-49978 | |
| High8.1 | Authentication Bypass via Social Logins ≤2.9.2No patch available | CVE-2024-11917 | |
| Critical9.8 | Authentication Bypass to Account Takeover and Privilege Escalation ≤2.6.7Update to 2.6.8 | CVE-2024-11925 | |
| Critical9.9 | Authenticated (Subscriber+) Arbitrary File Upload ≤2.6.7Update to 2.6.8 | CVE-2024-8614 | |
| Critical10.0 | Unauthenticated Arbitrary File Upload ≤2.6.7Update to 2.6.8 | CVE-2024-8615 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.5.9Update to 2.6.1 | CVE-2024-47394 | |
| Critical9.8 | Unauthenticated PHP Object Injection ≤2.5.9Update to 2.6.1 | CVE-2024-47636 | |
| Medium4.3 | Cross-Site Request Forgery ≤2.5.3Update to 2.5.4 | CVE-2024-43930 | |
| Medium5.3 | Missing Authorization ≤2.5.4Update to 2.5.6 | CVE-2024-43929 | |
| Critical10.0 | Unauthenticated PHP Object Injection ≤2.5.3Update to 2.5.4 | CVE-2024-43931 | |
| Medium4.3 | Missing Authorization ≤2.5.4Update to 2.5.6 | CVE-2024-43928 | |
| Critical9.8 | Authentication Bypass to Account Takeover ≤2.3.4No patch available | CVE-2024-43245 | |
| Critical9.8 | Authentication Bypass ≤2.3.3Update to 2.3.4 | CVE-2023-6584 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤2.3.3Update to 2.3.4 | CVE-2023-6585 | |
| Medium4.3 | Missing Authorization on jobsearch_update_job_import_schedule_call() function ≤1.8.1Update to 1.8.2 | CVE-2021-4364 | |
| Medium5.3 | Missing Authorization to Settings Change ≤1.8.1Update to 1.8.2 | CVE-2021-4352 | |
| High8.8 | Missing Authorization to Arbitrary Options Update ≤1.8.1Update to 1.8.2 | CVE-2021-4361 | |
| Medium6.4 | Stored Cross-Site Scripting <1.7.4Update to 1.7.4 | CVE-2021-24421 | |
| Medium6.1 | Reflected Cross-Site Scripting <1.5.6Update to 1.5.6 | — | |
| Medium6.1 | Reflected Cross-Site Scripting <1.5.5Update to 1.5.5 | — | |
| Medium6.4 | Stored Cross-Site Scripting ≤1.5.1Update to 1.5.2 | — | |
| Medium6.4 | Stored Cross-Site Scripting ≤1.5.1Update to 1.5.2 | — | |
| Medium6.1 | Reflected Cross-Site Scripting <1.5.3Update to 1.5.3 | — | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.5.1Update to 1.5.2 | — | |
| Medium6.4 | Authenticated Stored Cross-Site Scripting <1.5.3Update to 1.5.3 | — | |
| Medium6.4 | Stored Cross-Site Scripting ≤1.5.1Update to 1.5.2 | — | |
| High7.1 | Reflected Cross-Site Scripting <1.5.1Update to 1.5.1 | CVE-2022-1168 |
- High8.1Unauthenticated PHP Object Injection
≤3.2.0No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
≤3.2.9Update to 3.3.0
- High7.5Unauthenticated SQL Injection
≤3.2.9Update to 3.3.0
- Medium5.3Missing Authorization
≤3.2.7Update to 3.2.8
- Medium6.1Reflected Cross-Site Scripting
≤3.2.0Update to 3.2.2
- High8.1Unauthenticated PHP Object Injection
<3.0.8Update to 3.0.8
- High7.5Authenticated (Subscriber+) Local File Inclusion
<3.0.8Update to 3.0.8
- Medium6.1Reflected Cross-Site Scripting
<3.0.6Update to 3.0.6
- Medium4.3Authenticated (Subscriber+) Insecure Direct Object Reference
<3.0.6Update to 3.0.6
- High8.1Authentication Bypass via Social Logins
≤2.9.2No patch available
- Critical9.8Authentication Bypass to Account Takeover and Privilege Escalation
≤2.6.7Update to 2.6.8
- Critical9.9Authenticated (Subscriber+) Arbitrary File Upload
≤2.6.7Update to 2.6.8
- Critical10.0Unauthenticated Arbitrary File Upload
≤2.6.7Update to 2.6.8
- Medium6.1Reflected Cross-Site Scripting
≤2.5.9Update to 2.6.1
- Critical9.8Unauthenticated PHP Object Injection
≤2.5.9Update to 2.6.1
- Medium4.3Cross-Site Request Forgery
≤2.5.3Update to 2.5.4
- Medium5.3Missing Authorization
≤2.5.4Update to 2.5.6
- Critical10.0Unauthenticated PHP Object Injection
≤2.5.3Update to 2.5.4
- Medium4.3Missing Authorization
≤2.5.4Update to 2.5.6
- Critical9.8Authentication Bypass to Account Takeover
≤2.3.4No patch available
- Critical9.8Authentication Bypass
≤2.3.3Update to 2.3.4
- Critical9.8Unauthenticated Arbitrary File Upload
≤2.3.3Update to 2.3.4
- Medium4.3Missing Authorization on jobsearch_update_job_import_schedule_call() function
≤1.8.1Update to 1.8.2
- Medium5.3Missing Authorization to Settings Change
≤1.8.1Update to 1.8.2
- High8.8Missing Authorization to Arbitrary Options Update
≤1.8.1Update to 1.8.2
- Medium6.4Stored Cross-Site Scripting
<1.7.4Update to 1.7.4
- Medium6.1Reflected Cross-Site Scripting
<1.5.6Update to 1.5.6
- Medium6.1Reflected Cross-Site Scripting
<1.5.5Update to 1.5.5
- Medium6.4Stored Cross-Site Scripting
≤1.5.1Update to 1.5.2
- Medium6.4Stored Cross-Site Scripting
≤1.5.1Update to 1.5.2
- Medium6.1Reflected Cross-Site Scripting
<1.5.3Update to 1.5.3
- Medium6.1Reflected Cross-Site Scripting
≤1.5.1Update to 1.5.2
- Medium6.4Authenticated Stored Cross-Site Scripting
<1.5.3Update to 1.5.3
- Medium6.4Stored Cross-Site Scripting
≤1.5.1Update to 1.5.2
- High7.1Reflected Cross-Site Scripting
<1.5.1Update to 1.5.1
JobSearch WP Job Board: common questions
Does JobSearch WP Job Board have known vulnerabilities?
Yes. VulnCrest Radar lists 35 known vulnerabilities in JobSearch WP Job Board: 8 critical, 8 high, 19 medium. At least one is not fixed in the latest version.
How do I check which version of JobSearch WP Job Board I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent JobSearch WP Job Board vulnerability?
CVE-2026-84834, published Sep 3, 2026: JobSearch WP Job Board <= 3.2.0 - Unauthenticated PHP Object Injection. Severity: High (CVSS 8.1).
Is any JobSearch WP Job Board vulnerability listed in CISA KEV?
No. None of the known JobSearch WP Job Board vulnerabilities is currently listed in the CISA KEV catalog.