WordPress plugin
WP Job Board security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High2
- Medium6
- Low0
All WP Job Board vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Cross-Site Request Forgery to Remote Code Execution <5.11.1Update to 5.11.1 | CVE-2025-30967 | |
| Medium4.3 | Authenticated (Subscriber+) Path Traversal <5.11.1Update to 5.11.1 | CVE-2025-30966 | |
| Medium4.3 | Cross-Site Request Forgery <5.11.1Update to 5.11.1 | CVE-2025-30965 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.10.1Update to 5.11.1 | CVE-2025-24781 | |
| Critical9.8 | Unauthenticated SQL Injection ≤5.9.0No patch available | CVE-2023-36525 | |
| Medium6.1 | Reflected Cross-Site Scripting & Cross-Frame Scripting ≤5.6.4Update to 5.7.0 | — | |
| Critical9.8 | SQL Injection ≤5.6.4Update to 5.7.0 | — | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting ≤5.5.3Update to 5.6.0 | CVE-2020-9019 | |
| High7.2 | SQL Injection <4.5Update to 4.5 | CVE-2018-5695 | |
| Medium6.1 | Cross-Site Scripting ≤4.5.1Update to 5.0 | CVE-2017-15375 |
- High8.8Cross-Site Request Forgery to Remote Code Execution
<5.11.1Update to 5.11.1
- Medium4.3Authenticated (Subscriber+) Path Traversal
<5.11.1Update to 5.11.1
- Medium4.3Cross-Site Request Forgery
<5.11.1Update to 5.11.1
- Medium6.1Reflected Cross-Site Scripting
≤5.10.1Update to 5.11.1
- Critical9.8Unauthenticated SQL Injection
≤5.9.0No patch available
- Medium6.1Reflected Cross-Site Scripting & Cross-Frame Scripting
≤5.6.4Update to 5.7.0
- Critical9.8SQL Injection
≤5.6.4Update to 5.7.0
- Medium6.1Unauthenticated Stored Cross-Site Scripting
≤5.5.3Update to 5.6.0
- High7.2SQL Injection
<4.5Update to 4.5
- Medium6.1Cross-Site Scripting
≤4.5.1Update to 5.0
WP Job Board: common questions
Does WP Job Board have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in WP Job Board: 2 critical, 2 high, 6 medium. At least one is not fixed in the latest version.
How do I check which version of WP Job Board I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Job Board vulnerability?
CVE-2025-30967, published Apr 10, 2025: WPJobBoard < 5.11.1 - Cross-Site Request Forgery to Remote Code Execution. Severity: High (CVSS 8.8).
Is any WP Job Board vulnerability listed in CISA KEV?
No. None of the known WP Job Board vulnerabilities is currently listed in the CISA KEV catalog.