JobWP – Job Board Plugin for WordPress | Job Listings, Career Page & Applications

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   JobWP – Job Board Plugin for WordPress | Job Listings, Career Page & Applications

Information

Software Type Plugin
Software Slug jobwp (view on wordpress.org)
Software Status Active
Software Author mhmrajib
Software Website wordpress.org
Software Downloads 26,902
Software Active Installs 1,000
Software Record Last Updated July 22, 2026

8 Vulnerabilities

Submit a Vulnerability
JobWP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2025-69318
Jan 21, 2026
Researcher: daroo
JobWP <= 2.4.3 - Cross-Site Request Forgery
4.3
CVE-2025-57895
Aug 22, 2025
Researcher: Nabil Irawan
JobWP <= 2.4.0 - Cross-Site Request Forgery
4.3
CVE-2025-49975
Jun 19, 2025
Researcher: domiee13
JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin <= 2.3.9 - Unauthenticated SQL Injection
7.5
CVE-2025-2010
Apr 18, 2025
Researcher: stealthcopter
JobWP <= 2.3.9 - Cross-Site Request Forgery
4.3
CVE-2025-32265
Apr 4, 2025
Researcher: Skalucy
WordPress Job Board and Recruitment Plugin – JobWP <= 2.1 - Sensitive Information Exposure
7.5
CVE-2023-48288
Nov 23, 2023
Researcher: Myungju Kim
WordPress Job Board and Recruitment Plugin – JobWP <= 2.0 - Arbitrary File Upload via 'jobwp_upload_resume'
9.8
CVE-2023-29384
Aug 1, 2023
Researcher: Myungju Kim
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
6.1
CVE-2023-33999
Jul 18, 2023
Researcher: Rafie Muhammad
Title Status CVE ID CVSS Researchers Date
JobWP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2025-69318 7.2 daroo January 21, 2026
JobWP <= 2.4.3 - Cross-Site Request Forgery Patched CVE-2025-57895 4.3 Nabil Irawan August 22, 2025
JobWP <= 2.4.0 - Cross-Site Request Forgery Patched CVE-2025-49975 4.3 domiee13 June 19, 2025
JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin <= 2.3.9 - Unauthenticated SQL Injection Patched CVE-2025-2010 7.5 stealthcopter April 18, 2025
JobWP <= 2.3.9 - Cross-Site Request Forgery Patched CVE-2025-32265 4.3 Skalucy April 4, 2025
WordPress Job Board and Recruitment Plugin – JobWP <= 2.1 - Sensitive Information Exposure Patched CVE-2023-48288 7.5 Myungju Kim November 23, 2023
WordPress Job Board and Recruitment Plugin – JobWP <= 2.0 - Arbitrary File Upload via 'jobwp_upload_resume' Patched CVE-2023-29384 9.8 Myungju Kim August 1, 2023
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Patched CVE-2023-33999 6.1 Rafie Muhammad July 18, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation