Is simple-job-board (WordPress plugin) vulnerable?

WordPress simple-job-board has 8 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.

8advisories
1critical
0on CISA KEV
1no fix recorded
CVETitleSeverityCVSSAffectedFixed in
CVE-2024-1813The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserializacritical9.8<2.11.12.11.1
CVE-2022-2558The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes medium5.3<2.10.02.10.0
CVE-2017-18498The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.medium6.1<2.4.42.4.4
CVE-2021-39328The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_pomedium5.5<=2.9.4–
CVE-2024-0593The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the femedium5.3<2.11.02.11.0
CVE-2024-7351The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserializahigh7.2<2.12.42.12.4
CVE-2024-7762The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to acclow3.7<2.12.62.12.6
CVE-2024-7761In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Storedmedium6.1<2.12.22.12.2

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs   How findings are ranked
A version is vulnerable when it falls inside an affected range and below the fixed version. phpwarden applies these ranges to the exact versions in your lockfile or install, so you only see what applies to you.