WordPress wp-job-portal has 16 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2023-4490 | The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQ | critical | 9.8 | <2.0.6 | 2.0.6 |
| CVE-2024-7950 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusio | critical | 9.8 | <2.1.7 | 2.1.7 |
| CVE-2024-13371 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitr | medium | 5.3 | <2.2.7 | 2.2.7 |
| CVE-2024-11711 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via t | high | 7.5 | <2.2.3 | 2.2.3 |
| CVE-2024-11712 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access | medium | 5.3 | <2.2.3 | 2.2.3 |
| CVE-2024-11710 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via t | medium | 4.9 | <2.2.3 | 2.2.3 |
| CVE-2024-11713 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via t | medium | 4.9 | <2.2.3 | 2.2.3 |
| CVE-2024-11714 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via t | medium | 4.9 | <2.2.3 | 2.2.3 |
| CVE-2024-11715 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access | medium | 4.8 | <2.2.3 | 2.2.3 |
| CVE-2024-13372 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Obj | medium | 5.3 | <2.2.7 | 2.2.7 |
| CVE-2024-13428 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Obj | medium | 5.3 | <2.2.7 | 2.2.7 |
| CVE-2024-12132 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Obj | medium | 4.3 | <2.2.5 | 2.2.5 |
| CVE-2024-13425 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Obj | medium | 4.3 | <2.2.7 | 2.2.7 |
| CVE-2024-13429 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Obj | medium | 4.3 | <2.2.7 | 2.2.7 |
| CVE-2024-13873 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Obj | medium | 4.3 | <2.2.9 | 2.2.9 |
| CVE-2024-12131 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Obj | medium | 4.3 | <2.2.6 | 2.2.6 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked