Workscout Core

Workscout Core has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; 5 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 1 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Path Traversal.

5 of the records (83%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

5 independent researchers contributed these findings, most of them (2) reported by Bonds.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage83%

Open

Fixed

Get automatic notifications for all Workscout Core vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2026-57786

WorkScout-Core <= 1.7.08 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

6 records


2026-07-02 00:00	WorkScout-Core <= 1.7.08 - Cross-Site Request Forgery Workscout Core <= 1.7.08	`CVE-2026-57786`	4.3 Medium	Phat RiO	No
2026-06-15 00:00	Workscout Core <= 1.7.11 - Unauthenticated Arbitrary File Deletion Workscout Core <= 1.7.11	`CVE-2026-52716`	9.1 Critical	Nguyen Ba Khanh	Yes
2026-01-21 00:00	WorkScout-Core <= 1.7.06 - Unauthenticated Stored Cross-Site Scripting Workscout Core <= 1.7.06	`CVE-2025-67960`	7.2 High	João Pedro Soares de Alcântara	Yes
2025-09-23 00:00	WorkScout-Core < 1.7.06 - Reflected Cross-Site Scripting Workscout Core < 1.7.06	`CVE-2025-59571`	6.1 Medium	Bonds	Yes
2025-09-22 00:00	WorkScout-Core < 1.7.06 - Cross-Site Request Forgery Workscout Core < 1.7.06	`CVE-2025-59572`	4.3 Medium	Bonds	Yes
2021-04-08 00:00	WorkScout - Job Board WordPress Theme <= 2.0.31 - Stored Cross-Site Scripting Workscout Core < 1.3.4	`CVE-2021-24246`	6.4 Medium	R3N0	Yes

Showing 1–6 of 6 reports