Vulnerabilities and security researches foreasyjobs easyjobs
Direction: ascendingJun 07, 2024
easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg # 9eb1dab3349cc2687c7b3d5af353998e46445d6f
- CVE, Research URL
- Application
- Date
- Jan 31, 2022
- Research Description
- easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution [easyjobs] < 1.4.8 WordPress EasyJobs plugin <= 1.4.7 - Reflected Cross-Site Scripting (XSS) vulnerability Reflected Cross-Site Scripting (XSS) vulnerability discovered by Jan w Oleju in WordPress EasyJobs plugin (versions <= 1.4.7).
- Affected versions
-
max 1.4.8.
- Status
-
vulnerable
easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg # CVE-2023-6843
- CVE, Research URL
- Application
- Date
- Jan 15, 2024
- Research Description
- The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress plugin before 2.4.7 does not properly secure some of its AJAX actions, allowing any logged-in users to modify its settings.
- Affected versions
-
max 2.4.7.
- Status
-
vulnerable
Sep 02, 2024
easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg # CVE-2024-43997
- CVE, Research URL
- Application
- Date
- Oct 17, 2024
- Research Description
- Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.14.
- Affected versions
-
max 2.4.15.
- Status
-
vulnerable
Jun 16, 2026
easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg # b7ac3123fe0e8379df12789a1e40f11bcea24460
- CVE, Research URL
- Application
- Date
- Feb 03, 2022
- Research Description
- easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution [easyjobs] < 1.4.8 EasyJobs <= 1.4.7 - Reflected Cross-Site Scripting The EasyJobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘job-id’ parameter in versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
- Affected versions
-
max 1.4.8.
- Status
-
vulnerable
easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg # cc2fadec-2353-4c39-a395-84f2a0d08058
- CVE, Research URL
- Application
- Date
- -
- Research Description
- easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution [easyjobs] < 1.4.8 EasyJobs < 1.4.8 - Reflected Cross-Site Scripting The plugin does not sanitise and escape the job-id parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting
- Affected versions
-
max 1.4.8.
- Status
-
vulnerable
Oct 29, 2026
easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg # CVE-2026-108366
- CVE, Research URL
- Application
- Date
- Oct 28, 2026
- Research Description
- The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin for WordPress is vulnerable to Authenticated (Contributor+) Stored Cross-Site Scripting via the 'icon' attribute of the easyjobs/job-list Gutenberg block in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Affected versions
-
max 2.8.3.
- Status
-
vulnerable
Nov 01, 2026
easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg # CVE-2026-112365
- CVE, Research URL
- Application
- Date
- Oct 30, 2026
- Research Description
- The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cover_letter' parameter in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Successful execution requires an administrator to open the affected candidate's Application tab and click the attacker-crafted link, at which point WHATWG URL parsing collapses the encoded scheme back to javascript: and executes the payload.
- Affected versions
-
max 2.8.5.
- Status
-
vulnerable