Job Postings
Job Postings has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 10 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.5 out of 10. 2025 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 9 of the records (82%). Other recurring categories include Missing Authorization, Path Traversal.
10 of the records (91%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
11 independent researchers contributed these findings, one record each. Job Postings is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-68597Jobs for WordPress <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Job Postings
Author
BlueGlass Interactive AG
Job Postings is a powerfull WordPress plugin that make it easy to add job postings to your company’s website in a structured way. While you can comfortably create and manage job postings in a very user-friendly way, they are also automatically structured with schema.org. Thus, they are technically easy to read for Google and have a high chance of being displayed and ranked well in search results and you can save on expensive postings on job platforms. Features Add, manage and categorize job listings using the familiar WordPress UI Adjust styles of the job postings to your needs with live preview under settings Preview of your job listing before it goes live – the preview matches the appearance of a live job listing The job listings are automatically formatted with structured data (JSON-LD) Visitors can search in your job postings Job postings are easy to implement via shortcodes or PHP function Job postings can be saved in PDF format Each listing can be customized with drag-and-drop – in terms of modules, structure, paragraph namings and order, etc. Applications can be easily clustered and filtered for a comfortable navigation Each listing can be tied to a particular application recipient / e-mail address Developer friendly — Custom Post Types, Single job template, a lot of hooks and filters implemented. Apply Form can be easily modified from Settings page. Look and feel of the plugin can be easily modified from Settings page. Applications protected from spam with invisible “honey pot” and additionally with Google reCaptcha. You can define default fields and sorting for new job postings. WCAG 2.2 accessibility support – semantic HTML and ARIA attributes
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C