Job Postings

Job Postings has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 10 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.5 out of 10. 2025 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 9 of the records (82%). Other recurring categories include Missing Authorization, Path Traversal.

10 of the records (91%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

11 independent researchers contributed these findings, one record each. Job Postings is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage91%
Open

1

Fixed

10

Get automatic notifications for all Job Postings vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-68597

Jobs for WordPress <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

11 records
2026-03-10 00:00CVE-2026-23806
5.3
Medium
Krissaphat JankaewYes
2025-12-22 00:00CVE-2025-68597
6.4
Medium
Muhammad Yudha - DJNo
2025-06-19 00:00CVE-2025-50050
6.4
Medium
yuhdaYes
2025-03-25 00:00CVE-2025-1310
6.5
Medium
Arkadiusz HydzikYes
2025-03-03 00:00CVE-2024-10105
6.4
Medium
Bob MatyasYes
2024-10-28 00:00CVE-2024-10104
6.4
Medium
Krugov ArtyomYes
2024-04-17 00:00CVE-2024-2833
6.1
Medium
Krzysztof ZającYes
2024-04-12 00:00CVE-2024-32149
6.1
Medium
KhalidYes
2024-02-21 00:00CVE-2024-0820
6.4
Medium
cyc707Yes
2023-02-21 00:00CVE-2023-26017
4.4
Medium
yuyudhnYes
Showing 1–10 of 11 reports
Job Postings banner
Latestv2.8.2
4.4(58)
88/100
Last Updated
2026-08-26 (18d ago)
Active Installs
10,000+
Downloads
254,335
Requires WP
5.0+
Requires PHP
0+
Tested up to
WP 7.1
Created
2017-07-25 (9y ago)

Job Postings is a powerfull WordPress plugin that make it easy to add job postings to your company’s website in a structured way. While you can comfortably create and manage job postings in a very user-friendly way, they are also automatically structured with schema.org. Thus, they are technically easy to read for Google and have a high chance of being displayed and ranked well in search results and you can save on expensive postings on job platforms. Features Add, manage and categorize job listings using the familiar WordPress UI Adjust styles of the job postings to your needs with live preview under settings Preview of your job listing before it goes live – the preview matches the appearance of a live job listing The job listings are automatically formatted with structured data (JSON-LD) Visitors can search in your job postings Job postings are easy to implement via shortcodes or PHP function Job postings can be saved in PDF format Each listing can be customized with drag-and-drop – in terms of modules, structure, paragraph namings and order, etc. Applications can be easily clustered and filtered for a comfortable navigation Each listing can be tied to a particular application recipient / e-mail address Developer friendly — Custom Post Types, Single job template, a lot of hooks and filters implemented. Apply Form can be easily modified from Settings page. Look and feel of the plugin can be easily modified from Settings page. Applications protected from spam with invisible “honey pot” and additionally with Google reCaptcha. You can define default fields and sorting for new job postings. WCAG 2.2 accessibility support – semantic HTML and ARIA attributes

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C