Wp-jobhunt ProjectCVEs & Vulnerabilities
2 CVEs affecting Wp-jobhunt Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
wp-jobhunt 2
CVE-2018-19488CRITICAL
The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_reset_pass() function through the admin-ajax.php file, which allows remote unauthenticated attackers to reset the password of a user's account.
21 Mar 2019
9.8
CVSS
CVE-2018-19487HIGH
The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profile() function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users.
21 Mar 2019
7.5
CVSS
← PrevPage 1 / 1Next →