HireZoot – Job Listings, Career Page & Recruitment Tool
HireZoot – Job Listings, Career Page & Recruitment Tool has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 4 are fixed as of October 2026. Their average CVSS score is 5.0, and the most serious one scores 6.4 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization.
Every one of the 4 issues recorded for HireZoot – Job Listings, Career Page & Recruitment Tool has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, one record each. HireZoot – Job Listings, Career Page & Recruitment Tool is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-107790Job Openings <= 4.1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
HireZoot – Job Listings, Career Page & Recruitment Tool
Author
awsm.in
HireZoot (formerly WP Job Openings) makes hiring simple. Add job listings, publish a clean careers page, and manage applications without leaving WordPress. HireZoot is designed for teams that want a straightforward hiring workflow without unnecessary complexity. Install the plugin, add your job details, and your careers page is ready. Version 4 introduces a redesigned dashboard, improved job browsing, flexible filtering, and a smoother overall experience. View Demo ↗︎ Visit website – HireZoot.com ↗︎ 🆕 What’s New in Version 4 Redesigned admin dashboard for better usability New Stack layout for job listings All new Gutenberg block with advanced customisation features Sidebar filters for improved navigation Multi-select filters and sorting options Improved application management Resume preview feature added to the core plugin Performance and usability improvements 💼 Key Features ✔ Simple setup – get started in minutes ✔ Multiple layouts: Grid, List, and Stack ✔ Sidebar and inline filtering options ✔ AJAX-powered search and filtering ✔ Unlimited job specifications ✔ Built-in application form ✔ Manage applications inside WordPress ✔ Customizable email notifications ✔ Job expiry options ✔ Structured data for SEO ✔ Clean and user-friendly UI ✔ WPML support ✔ Developer-friendly with hooks ✨ Premium Features ✔ Custom application form builder ✔ Shortlist, reject, and rate candidates ✔ Notes and activity logs ✔ Advanced email notifications ✔ Export and filter applications ✔ Attach files with email notifications ✔ Shortcode generator for custom job listings ✔ External application links and third-party forms All Premium Features ↗︎ 🔌 Add-ons Auto-Delete Applications (FREE) PRO Pack (PREMIUM) User Access Control (PREMIUM) Job Alerts (PREMIUM) Contribute Translate the plugin: https://translate.wordpress.org/projects/wp-plugins/wp-job-openings/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C