Plugin security history

JobSearch WP Job Board Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 34 vulnerability records associated with JobSearch WP Job Board, published between 2020 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

34Total records

8Critical

7High

19Medium

0Low

0Informational

32Patched records

2Currently marked unpatched

2020-06-03First disclosure

2026-07-07Latest disclosure

26 of 34CVE coverage

Year-by-Year Timeline

Year	Records	Relative volume
2020	9	9 records
2021	4	4 records
2023	2	2 records
2024	10	10 records
2025	5	5 records
2026	4	4 records

Severity Breakdown

Severity	Records	Share
Critical	8	23.5%
High	7	20.6%
Medium	19	55.9%

Vulnerability-Type Breakdown

Cross-Site Scripting

14 records41.2%

First: 2020. Latest: 2026.

Authentication Bypass

4 records11.8%

First: 2023. Latest: 2025.

Missing Authorization

4 records11.8%

First: 2024. Latest: 2026.

Other

4 records11.8%

First: 2024. Latest: 2025.

Privilege Escalation

3 records8.8%

First: 2021. Latest: 2021.

Arbitrary File Upload

3 records8.8%

First: 2023. Latest: 2024.

CSRF

1 record2.9%

First: 2024. Latest: 2024.

SQL Injection

1 record2.9%

First: 2026. Latest: 2026.

Patch Status

Patched: 32
Currently marked unpatched: 2
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

3.3.0
3.2.8
3.2.2
3.0.8
3.0.6
2.6.8
2.6.1
2.5.6
2.5.4
2.3.4
1.8.2
1.7.4
1.5.6
1.5.5
1.5.3
1.5.2
1.5.1

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-3.2.9`	JobSearch WP Job Board <= 3.2.9 - Unauthenticated Stored Cross-Site Scripting	July 7, 2026	3.3.0	High
`*-3.2.9`	JobSearch WP Job Board <= 3.2.9 - Unauthenticated SQL Injection	June 16, 2026	3.3.0	High
`*-3.2.7`	JobSearch WP Job Board <= 3.2.7 - Missing Authorization	June 3, 2026	3.2.8	Medium
`*-3.2.0`	JobSearch WP Job Board <= 3.2.0 - Reflected Cross-Site Scripting	March 23, 2026	3.2.2	Medium
`[*, 3.0.8)`	JobSearch < 3.0.8 - Unauthenticated PHP Object Injection	October 3, 2025	3.0.8	High
`[*, 3.0.8)`	JobSearch < 3.0.8 - Authenticated (Subscriber+) Local File Inclusion	August 14, 2025	3.0.8	High
`[*, 3.0.6)`	JobSearch < 3.0.6 - Reflected Cross-Site Scripting	June 26, 2025	3.0.6	Medium
`[*, 3.0.6)`	JobSearch < 3.0.6 - Authenticated (Subscriber+) Insecure Direct Object Reference	June 19, 2025	3.0.6	Medium
`*-2.9.2`	JobSearch WP Job Board <= 2.9.2 - Authentication Bypass via Social Logins	April 24, 2025	Not supplied	High
`*-2.6.7`	WP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation	November 27, 2024	2.6.8	Critical
`*-2.6.7`	WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload	November 5, 2024	2.6.8	Critical
`*-2.6.7`	WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload	November 5, 2024	2.6.8	Critical
`*-2.5.9`	JobSearch <= 2.5.9 - Unauthenticated PHP Object Injection	September 30, 2024	2.6.1	Critical
`*-2.5.9`	JobSearch <= 2.5.9 - Reflected Cross-Site Scripting	September 30, 2024	2.6.1	Medium
`*-2.5.4`	JobSearch <= 2.5.4 - Missing Authorization	August 26, 2024	2.5.6	Medium
`*-2.5.3`	JobSearch <= 2.5.3 - Unauthenticated PHP Object Injection	August 26, 2024	2.5.4	Critical
`*-2.5.4`	JobSearch <= 2.5.4 - Missing Authorization	August 26, 2024	2.5.6	Medium
`*-2.5.3`	JobSearch <= 2.5.3 - Cross-Site Request Forgery	August 26, 2024	2.5.4	Medium
`*-2.3.4`	JobSearch <= 2.3.4 - Authentication Bypass to Account Takeover	August 12, 2024	Not supplied	Critical
`*-2.3.3`	WP JobSearch <= 2.3.3 - Authentication Bypass	November 24, 2023	2.3.4	Critical
`*-2.3.3`	WP JobSearch <= 2.3.3 - Unauthenticated Arbitrary File Upload	November 24, 2023	2.3.4	Critical
`*-1.8.1`	JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function	October 5, 2021	1.8.2	Medium
`*-1.8.1`	JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Arbitrary Options Update	October 5, 2021	1.8.2	High
`*-1.8.1`	JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Settings Change	October 5, 2021	1.8.2	Medium
`[*, 1.7.4)`	WP JobSearch <= 1.7.3 - Stored Cross-Site Scripting	May 19, 2021	1.7.4	Medium

Selected source records

Latest Records

HighCVE-2026-57383

JobSearch WP Job Board <= 3.2.9 - Unauthenticated Stored Cross-Site Scripting

Published: July 7, 2026

Affected versions: *-3.2.9
Patched versions: 3.3.0

Original Wordfence record

HighCVE-2026-54186

JobSearch WP Job Board <= 3.2.9 - Unauthenticated SQL Injection

Published: June 16, 2026

Affected versions: *-3.2.9
Patched versions: 3.3.0

Original Wordfence record

MediumCVE-2026-49057

JobSearch WP Job Board <= 3.2.7 - Missing Authorization

Published: June 3, 2026

Affected versions: *-3.2.7
Patched versions: 3.2.8

Original Wordfence record

MediumCVE-2026-32493

JobSearch WP Job Board <= 3.2.0 - Reflected Cross-Site Scripting

Published: March 23, 2026

Affected versions: *-3.2.0
Patched versions: 3.2.2

Original Wordfence record

HighCVE-2025-62025

JobSearch < 3.0.8 - Unauthenticated PHP Object Injection

Published: October 3, 2025

Affected versions: [*, 3.0.8)
Patched versions: 3.0.8

Original Wordfence record

HighCVE-2025-52806

JobSearch < 3.0.8 - Authenticated (Subscriber+) Local File Inclusion

Published: August 14, 2025

Affected versions: [*, 3.0.8)
Patched versions: 3.0.8

Original Wordfence record

MediumCVE-2025-52798

JobSearch < 3.0.6 - Reflected Cross-Site Scripting

Published: June 26, 2025

Affected versions: [*, 3.0.6)
Patched versions: 3.0.6

Original Wordfence record

MediumCVE-2025-49978

JobSearch < 3.0.6 - Authenticated (Subscriber+) Insecure Direct Object Reference

Published: June 19, 2025

Affected versions: [*, 3.0.6)
Patched versions: 3.0.6

Original Wordfence record

Highest-Severity Records

CriticalCVE-2024-8615

WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload

Published: November 5, 2024

Affected versions: *-2.6.7
Patched versions: 2.6.8

Original Wordfence record

CriticalCVE-2024-43931

JobSearch <= 2.5.3 - Unauthenticated PHP Object Injection

Published: August 26, 2024

Affected versions: *-2.5.3
Patched versions: 2.5.4

Original Wordfence record

CriticalCVE-2024-8614

WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload

Published: November 5, 2024

Affected versions: *-2.6.7
Patched versions: 2.6.8

Original Wordfence record

CriticalCVE-2024-11925

WP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation

Published: November 27, 2024

Affected versions: *-2.6.7
Patched versions: 2.6.8

Original Wordfence record

CriticalCVE-2023-6585

WP JobSearch <= 2.3.3 - Unauthenticated Arbitrary File Upload

Published: November 24, 2023

Affected versions: *-2.3.3
Patched versions: 2.3.4

Original Wordfence record

CriticalCVE-2024-43245

JobSearch <= 2.3.4 - Authentication Bypass to Account Takeover

Published: August 12, 2024

Affected versions: *-2.3.4
Patched versions: Not supplied

Original Wordfence record

CriticalCVE-2024-47636

JobSearch <= 2.5.9 - Unauthenticated PHP Object Injection

Published: September 30, 2024

Affected versions: *-2.5.9
Patched versions: 2.6.1

Original Wordfence record

CriticalCVE-2023-6584

WP JobSearch <= 2.3.3 - Authentication Bypass

Published: November 24, 2023

Affected versions: *-2.3.3
Patched versions: 2.3.4

Original Wordfence record

Currently Marked Unpatched Records

HighCVE-2024-11917

JobSearch WP Job Board <= 2.9.2 - Authentication Bypass via Social Logins

Published: April 24, 2025

Affected versions: *-2.9.2
Patched versions: Not supplied

Original Wordfence record

CriticalCVE-2024-43245

JobSearch <= 2.3.4 - Authentication Bypass to Account Takeover

Published: August 12, 2024

Affected versions: *-2.3.4
Patched versions: Not supplied

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory