Isolved Talent Acquisition
Isolved Talent Acquisition has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Isolved Talent Acquisition has a vendor fix available, so running the current release closes it.
All of these findings were reported by 0xd4rk5id3. Isolved Talent Acquisition is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-23920Isolved Talent Acquisition <= 1.3.9 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Isolved Talent Acquisition
Author
Sourcing Team
Isolved Talent Acquisition’s plugin provides a simple way to visualize your open positions on your website. The plugin was carefully designed to provide you a very simple layout that helps drive people to apply to your open positions. This extension also connects with over 15 hiring/recruiting tools. The settings area allows you to configure your career site. Some of the features include: Map orientation of your current open positions Customizable search bar Customize the colors to match your site Social media hyperlinks Many more To set up the plugin, simply provide your API key from your hiring system, and add the Isolved Talent Acquisition’s short code to the page you want your job listings on. Our plugin relies on 3rd access to https://feeds.applicantpro.com to pull in data for current open positions. This requires the use of a token provided by your Applicant Tracking System. Terms of use: https://admin.applicantpro.com/general-privacy-policy/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C