WordPress plugin
WP Job Board security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High2
- Medium6
- Low0
All WP Job Board vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Cross-Site Request Forgery to Remote Code Execution <5.11.1Update to 5.11.1 | CVE-2025-30967 | |
| Critical9.8 | Unauthenticated SQL Injection ≤5.9.0No patch available | CVE-2023-36525 | |
| Critical9.8 | SQL Injection ≤5.6.4Update to 5.7.0 | — | |
| High7.2 | SQL Injection <4.5Update to 4.5 | CVE-2018-5695 |
- High8.8Cross-Site Request Forgery to Remote Code Execution
<5.11.1Update to 5.11.1
- Critical9.8Unauthenticated SQL Injection
≤5.9.0No patch available
- Critical9.8SQL Injection
≤5.6.4Update to 5.7.0
- High7.2SQL Injection
<4.5Update to 4.5
WP Job Board: common questions
Does WP Job Board have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in WP Job Board: 2 critical, 2 high, 6 medium. At least one is not fixed in the latest version.
How do I check which version of WP Job Board I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Job Board vulnerability?
CVE-2025-30967, published Apr 10, 2025: WPJobBoard < 5.11.1 - Cross-Site Request Forgery to Remote Code Execution. Severity: High (CVSS 8.8).
Is any WP Job Board vulnerability listed in CISA KEV?
No. None of the known WP Job Board vulnerabilities is currently listed in the CISA KEV catalog.