WP Job Board

WP Job Board has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2025; 9 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 2 high. 2025 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (40%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF).

9 of the records (90%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2023.

4 independent researchers contributed these findings, most of them (4) reported by Ananda Dhakal.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage90%

Open

Fixed

Get automatic notifications for all WP Job Board vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2023-36525

WPJobBoard <= 5.9.0 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

10 records


2025-04-10 00:00	WPJobBoard < 5.11.1 - Cross-Site Request Forgery to Remote Code Execution WP Job Board < 5.11.1	`CVE-2025-30967`	8.8 High	Ananda Dhakal	Yes
2025-04-10 00:00	WPJobBoard < 5.11.1 - Authenticated (Subscriber+) Path Traversal WP Job Board < 5.11.1	`CVE-2025-30966`	4.3 Medium	Ananda Dhakal	Yes
2025-04-09 00:00	WPJobBoard < 5.11.1 - Cross-Site Request Forgery WP Job Board < 5.11.1	`CVE-2025-30965`	4.3 Medium	Ananda Dhakal	Yes
2025-01-27 00:00	WPJobBoard <= 5.10.1 - Reflected Cross-Site Scripting WP Job Board <= 5.10.1	`CVE-2025-24781`	6.1 Medium	Ananda Dhakal	Yes
2023-06-27 00:00	WPJobBoard <= 5.9.0 - Unauthenticated SQL Injection WP Job Board <= 5.9.0	`CVE-2023-36525`	9.8 Critical	R3N0	No
2020-11-25 00:00	WPJobBoard <= 5.6.4 - Reflected Cross-Site Scripting & Cross-Frame Scripting WP Job Board <= 5.6.4	`N/A`	6.1 Medium	R3N0	Yes
2020-11-25 00:00	WPJobBoard <= 5.6.4 - SQL Injection WP Job Board <= 5.6.4	`N/A`	9.8 Critical	R3N0	Yes
2020-02-26 00:00	WPJobBoard <= 5.5.3 - Unauthenticated Stored Cross-Site Scripting WP Job Board <= 5.5.3	`CVE-2020-9019`	6.1 Medium	Mohamad Pishdar	Yes
2018-01-06 00:00	WP Job Board <= 4.4.4 - SQL Injection WP Job Board < 4.5	`CVE-2018-5695`	7.2 High	Vulnerability Lab	Yes
2017-08-18 00:00	WPJobBoard <= 4.5.1 - Cross-Site Scripting WP Job Board <= 4.5.1	`CVE-2017-15375`	6.1 Medium	Vulnerability Lab	Yes

Showing 1–10 of 10 reports