CVSS: 5.3EPSS: %CPEs: 1EXPL: 0CVE-2024-7762 – Simple Job Board <= 2.12.5 - Unauthenticated Resumes Download
https://notcve.org/view.php?id=CVE-2024-7762
13 Sep 2024 — The Simple Job Board plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.12.5 due to insufficient access controls placed on the 'wp-content/uploads/jobpost/[YEAR]' directory. This makes it possible for unauthenticated attackers to download potentially sensitive resume information. • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.4EPSS: %CPEs: 1EXPL: 0CVE-2024-7761 – Simple Job Board <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2024-7761
04 Jul 2024 — The Simple Job Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disable... • CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-47188 – WordPress Simple Job Board plugin <= 2.10.5 - Broken Access Control vulnerability
https://notcve.org/view.php?id=CVE-2023-47188
03 Nov 2023 — Missing Authorization vulnerability in PressTigers Simple Job Board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through 2.10.5. The Simple Job Board plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.10.5. This makes it possible for unauthenticated attackers to perform an unauthorized action. • https://patchstack.com/database/wordpress/plugin/simple-job-board/vulnerability/wordpress-simple-job-board-plugin-2-10-5-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •