Workeera – AI Job Board with Applicant Tracking System (ATS)
Workeera – AI Job Board with Applicant Tracking System (ATS) has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Path Traversal, behind 1 of the records (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.
Every one of the 2 issues recorded for Workeera – AI Job Board with Applicant Tracking System (ATS) has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. The current release is tested up to WordPress 7.1.
CVE-2026-77018Workeera – AI Job Board with Applicant Tracking System (ATS) < 1.0.6 - Authenticated (Subscriber+) Arbitrary File Upload
Read the full analysisVulnerability Records

Workeera – AI Job Board with Applicant Tracking System (ATS)
Author
workeera
Take hiring further with Workeera that automate the slow parts: AI applicant match scoring ranks every application against the job — with the reasoning behind each score — so recruiters review the best-fit candidates first, while AI resume parsing and a candidate resume builder let job seekers apply in minutes. The result is less busywork, faster hiring, and a smoother experience for candidates. Workeera turns any WordPress site into a fully featured job board. Employers can register, post jobs and review applications from a dedicated front-end dashboard. Candidates can build their profile, upload CVs, browse jobs, and apply with a single click. Learn more at workeera.com. Everything — jobs, candidates, taxonomies, applications and CV files — is managed in dedicated custom database tables for performance, so your wp_posts and wp_postmeta stay clean. The AI add-ons connect to the Workeera AI service. To enable them, create an account at Hiremium, generate your API key from the dashboard, then paste it into Workeera → Settings → General on your site. Key features AI & automation ready — extend with free & official add-ons for AI applicant match scoring (with per-candidate reasoning), AI resume parsing, a candidate resume builder, and automated job alerts — automating screening and speeding up applications to save time for recruiters and job seekers. Front-end dashboards for candidates and employers, with a section-aware top bar (breadcrumbs + menu) and a dashboard home with live stats. Job listings page with keyword search, sorting, sticky/featured jobs, and rich filters: sector, skills, job type, experience, salary range, location (country/city), and more. Smart filtering — selecting a sector dynamically narrows the available skills, across listings, the job-posting form, the candidate profile and the admin. Custom taxonomies with their own tables and admin screens: Sectors, Skills, Job Types, Time Zones, Benefits, Experiences. Apply flow — applications are stored in a dedicated table and the candidate’s CV is copied into a private application-files folder so each application keeps its own snapshot. External apply mode — jobs can route applicants to an external URL instead of the in-site application popup, configurable per job. Employer dashboard — post jobs, manage jobs (edit/expire/feature), and review applications with bulk status changes (reviewed / shortlisted / rejected). Candidate dashboard — applied jobs, recommended jobs, CV manager (multiple CVs per candidate), and editable profile. wp-admin Jobs/Candidates/Applications screens with custom columns, employer filter, status filter, and a Workeera Dashboard page with site-wide stats. Email notifications for first-time job publication, new applications received, and application-status changes — fully themeable via template overrides. Scheduled tasks (WP-Cron) to expire jobs past their deadline, clean orphan application rows, refresh term counts, and purge stale transients. Theme-overridable templates — every front-end template can be overridden from the active theme’s workeera-remote-tech-job-board/ folder. Translation ready — all user-facing strings use the workeera-remote-tech-job-board text domain with proper translators: comments on placeholder strings. Custom DB tables for jobs, candidates, applications, taxonomy terms, term relations, term counts and a plugin transients store, with batched cron jobs to keep everything tidy. Google Job Posting Structured Data for Job Search — jobs are automatically marked up with the required schema.org JSON-LD for Google Job Search. Built for developers Object-oriented, PSR-style class structure. WordPress-standard PHPDoc / JSDoc on every public class and function. Filterable AJAX endpoints scoped through a single workeera_action dispatcher plus standard wp_ajax_* hooks. Parallel custom-table CRUD helper (Workeera_Query_Handler) and meta helper (workeera_get_object_meta / workeera_update_object_meta). Theme-overridable view layer via workeera_get_template_part( $slug, $name, $ext ).
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C