easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution
easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 4 are fixed as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 6.5 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Missing Authorization.
Every one of the 4 issues recorded for easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, one record each. easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2023-6843easy.jobs <= 2.4.6 - Missing Authorization to Settings Update
Read the full analysisVulnerability Records

easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution
Author
WPDeveloper
easyJobs – Job Manager, Hiring Platform, and Career Portal for WordPress easy.jobs is a SAAS recruitment solution which comes with full functionality from WordPress dashboard and it also has Elementor compatibility to manage the hiring process without using any codes. You can get started for FREE & use easy.jobs powerful integration with WordPress. Need a job board or complete hiring solution to take your company to the next level? Recruiting the right team member is the most important but quite difficult task for any business. However, you can make it easier & effective using the right solution that lets you track, analyze, communicate & most importantly evaluate candidates through advanced filtering systems from a single platform. Introducing EasyJobs – Easiest solution for the job recruitment to attract, manage & hire right talent faster. Why Does Your Company Need easy.jobs? 🔸 Attract & Convert The Right Talent 🔸 Faster & Better Hiring Process 🔸 Structured Candidate Pipeline 🔸 Ready Career Site WordPress Templates 🔸 Visual Pipeline For Screening Candidates 🔸 Customize Email Notifications 🔸 In-built Analytics To Analyze Data (Pro) 🔸 Export Candidate Data (Pro) 🔸 AI-Powered Screening System (Pro) 🔸 Manage Team Activity (Pro) 🔸 Create Career Site With Custom Domain (Pro) 🔸 Help Job Posts To Get Indexed On Google (Pro) 🔸 Powerful Integration With ZOOM & Google Meet (Pro) 🔸 Dedicated Support For WordPress Plugin 🔸 Seamless Integration With Elementor Page builder 🔥 KEY FEATURES FOR EXCEPTIONAL HIRING 💯 Get Your Entire Team Onboard 🔸 Collaborate With Hiring Team: Provide personalized team access to have full control over the recruiting team and make better & faster hiring decisions. 🔸 Insightful Reports From Analytics: Use advanced & automated reports to track activities and monitor the recruiting team to improve the hiring workflow. 🔸 Instant Smart Notifications: Get an instant notification to all the updates and also make your applicants alert for future activities to be prepared. 🔸 AI-Powered Screening System: Sort, filter, and screen candidates faster with the power of easy.jobs Artificial Intelligence. 🔸 Set Up Remote Hiring Easily: Recruit top talent remotely with easy.jobs remote hiring features. 🌟 Find The Right Candidate Faster 🔸 Smart Candidate Selection: Analyze and filter your desired applicants to get the right one & make the recruitment process faster than ever before. 🔸 Interactive Interview Process: Quiz, Personality Test & more to make the interview engaging for both and increase the brand value to the candidate. 🔸 Custom Job Apply Fields, Skills & Categories: Filter applicants more thoroughly by adding custom apply fields, skills, and more. 🔸 In-App Messaging With Candidates: Choose, Track and instantly contact with the candidate via messaging & make the hiring process smoother & effective. 💼 Establish Your Employer Brand 🔸 Customize Application Forms: Include job specific questionnaires or just ask some general questions to filter candidate profiles based on their responses 🔸 Branded Company Profile: Create stunning company page to showcase employee benefits & existing talented team activities to attract the top talent 🔸 Personalized Career Pages: Customizable yet responsive and professional looking career page that brings your company maximum exposure for the job posts 🌟 Build Your Career Site On WordPress 🔸 Connect easy.jobs With WordPress: Instantly connect easy.jobs to your WordPress website with API keys. 🔸 Full Control From WordPress Dashboard: Manage your entire hiring process effortlessly straight from your WordPress dashboard. 🔸 Create New Jobs, Edit Pipelines & More: Add new job posts, manage your hiring pipeline, and more with easy.jobs WordPress plugin. 🔸 Seamless Integration With Elementor: Build your career site just the way you want with your favorite Elementor page builder. 🚀 Backed By A Trusted Team This Recruitment solution is brought to you by the team behind WPDeveloper, a dedicated marketplace for WordPress, trusted by 5,000,000+ happy users. 👨💻 DOCUMENTATION AND SUPPORT For documentation and tutorials go to our Documentation If you have any more questions, visit our support on the Plugin’s Forum For more information about features, FAQs and documentation, check out our website at easy.jobs External services easy.jobs is a SaaS (Software as a Service). This plugin is a client for it, so it connects to the services below. Nothing is sent before you connect an easy.jobs account, except where noted. easy.jobs API (app.easy.jobs) Required. The plugin stores your jobs, candidates, pipelines and company settings on easy.jobs. * What is sent: your easy.jobs API key and the data you create or change in the plugin (jobs, candidate actions, messages, company profile, settings). On the career pages, the plugin requests your published jobs and company profile from the server side (visitors’ data is not sent). * When: when you connect your account and each time you use the EasyJobs admin screens; when a career page needs fresh job data. * Visitors’ browsers load the company logo, cover photo and gallery images you uploaded to easy.jobs from easy.jobs servers, and the “Apply” button links to app.easy.jobs. * Terms of Service: https://easy.jobs/terms/ — Privacy Policy: https://easy.jobs/privacy/ easy.jobs visitor analytics (analytics.easy.jobs, Matomo) Optional and OFF by default. Turn it on under EasyJobs → Settings → Privacy. * What is sent: when it is on, the career pages built with the [easyjobs_list] and [easyjobs_details] shortcodes load a Matomo script from analytics.easy.jobs. It sends page views, link clicks, the visitor’s IP address, browser and device details. When you turn it on (and when you sync), your site URL is registered with easy.jobs analytics. * Why: to show job-page statistics in your easy.jobs dashboard. * If you turn it on, add it to your site’s privacy policy and ask visitors for consent where the law requires it. * Terms of Service: https://easy.jobs/terms/ — Privacy Policy: https://easy.jobs/privacy/ — Matomo: https://matomo.org/privacy-policy/ Google Translate (translate.google.com) Optional and OFF by default. It runs only when you enable “Translate input fields” for your company on easy.jobs. * What is sent: on the career pages, the visitor’s browser loads the Google Translate script and Google receives the page content, the visitor’s IP address and browser details. A googtrans cookie stores the target language. * Google Terms of Service: https://policies.google.com/terms — Privacy Policy: https://policies.google.com/privacy Google Fonts (fonts.googleapis.com) — block editor only The plugin ships its own fonts (Poppins, Inter) and does not load Google Fonts on your site. Only in the block editor, when you choose a Google font in an EasyJobs block’s typography control, the editor loads that font from Google so you can preview it. Google receives the editor user’s IP address and browser details. * Google Terms of Service: https://policies.google.com/terms — Privacy Policy: https://policies.google.com/privacy WPInsights usage tracking (send.wpinsight.com) Optional and OFF by default. The plugin asks once (admin notice) whether you want to share usage data. Nothing is sent unless you click “Allow”. * What is sent: site URL, admin email address, WordPress, PHP and server versions, active and inactive plugins, active theme, and text direction. When you deactivate the plugin, the optional deactivation reason you choose. * Why: to keep the plugin compatible with popular themes and plugins. * Run by WPDeveloper. Terms: https://wpdeveloper.com/terms-and-conditions — Privacy Policy: https://wpdeveloper.com/privacy-policy Video embeds in the admin (YouTube, Vimeo, Google Drive) Admin screens only. The welcome screen and the dashboard embed an easy.jobs introduction video from YouTube. When a candidate answers a question with a video link, the candidate’s Application tab embeds it from YouTube, Vimeo or Google Drive. The provider receives the admin user’s IP address and browser details when the video loads. * YouTube / Google Drive: Terms https://policies.google.com/terms — Privacy https://policies.google.com/privacy * Vimeo: Terms https://vimeo.com/terms — Privacy https://vimeo.com/privacy Source code and build Every compiled file ships with its human-readable source in this plugin: Admin dashboard (React): admin/react/src/ → admin/assets/dist/react/. Build: cd admin/react && npm install && npm run build. Gutenberg blocks: blocks/blocks/*/src/, blocks/store/, blocks/index.js → blocks/dist/index.js, and blocks/controls/src/ → blocks/dist/modules.js. Build: npm install && npm run build (root), and cd blocks/controls && npm install && npm run build. Admin and public CSS/JS: admin/assets/src/, admin/assets/vendor/scss/, public/assets/src/ → admin/assets/dist/, public/assets/dist/. Build: npx gulp build. admin/assets/dist/js/easyjobs-admin-vendor-bundle.min.js is built from admin/assets/src/lib/js/ (Bootstrap 4.3.1 bundle and jquery-dateFormat 1.0.4). Bundled third-party libraries (unchanged, with their licences): PDF.js 3.11.174 (Apache-2.0, admin/assets/vendor/pdfjs/, source https://github.com/mozilla/pdf.js), SweetAlert 2.1.0 (MIT, https://github.com/t4t5/sweetalert), Select2 4.0.6 (MIT, https://github.com/select2/select2), Bootstrap 4.3.1 (MIT, https://github.com/twbs/bootstrap), Owl Carousel 2.3.4 (MIT, https://github.com/OwlCarousel2/OwlCarousel2), Poppins and Inter fonts (SIL OFL 1.1, public/assets/vendor/fonts/).
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C