Media
CVE-2024-13425
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 43
Restablecer filtros
Media
CVE-2024-13429
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion
Media
CVE-2024-12131
WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference
Media
CVE-2024-12132
WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Media
CVE-2024-11712
WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download
Media
CVE-2024-11710
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection
Alta
CVE-2024-11711
WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection
Media
CVE-2024-11714
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()
Media
CVE-2024-11713
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()
Media
CVE-2024-11715
WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation
Media
CVE-2024-52389
WP Job Portal <= 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Crítica
CVE-2024-7950
WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation
Media
CVE-2024-43266
WP Job Portal <= 2.1.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Media
CVE-2024-35759
WP Job Portal <= 2.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-35760
WP Job Portal <= 2.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-52184
WP Job Portal <= 2.0.6 - Cross-Site Request Forgery
Crítica
CVE-2023-4490
WP Job Portal <= 2.0.5 - Unauthenticated SQL Injection
Media
CVE-2022-41786
WP Job Portal <= 2.0.1 - Cross-Site Request Forgery to Settings Modification
Media
CVE-2023-28534
WP Job Portal <= 2.0.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.