Vulnerabilities and security researches forsimple-job-board simple-job-board

Jun 06, 2024

CVE, Research URL: CVE-2023-29440
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Nov 10, 2023
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board plugin <= 2.10.3 versions.
Affected versions: max 2.10.4.
Status: vulnerable

CVE, Research URL: CVE-2021-39328
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Oct 22, 2021
Research Description: The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable echo'd out via the ~/admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 2.9.4. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
Affected versions: max 2.9.5.
Status: vulnerable

CVE, Research URL: CVE-2023-52122
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Jan 05, 2024
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board.This issue affects Simple Job Board: from n/a through 2.10.6.
Affected versions: max 2.10.7.
Status: vulnerable

CVE, Research URL: CVE-2022-2558
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Aug 22, 2022
Research Description: The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations.
Affected versions: max 2.10.0.
Status: vulnerable

CVE, Research URL: CVE-2020-35749
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Jan 15, 2021
Research Description: Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.
Affected versions: max 2.9.4.
Status: vulnerable

CVE, Research URL: CVE-2024-0593
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Feb 21, 2024
Research Description: The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.
Affected versions: max 2.11.0.
Status: vulnerable

CVE, Research URL: CVE-2017-18498
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Aug 13, 2019
Research Description: The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.
Affected versions: max 2.4.4.
Status: vulnerable

CVE, Research URL: CVE-2024-1813
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Apr 10, 2024
Research Description: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code when a submitted job application is viewed.
Affected versions: max 2.11.1.
Status: vulnerable

Jun 10, 2024

CVE, Research URL: CVE-2023-47188
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Jan 02, 2025
Research Description: Missing Authorization vulnerability in PressTigers Simple Job Board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through 2.10.5.
Affected versions: max 2.10.6.
Status: vulnerable

Aug 25, 2024

CVE, Research URL: CVE-2024-7351
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Aug 24, 2024
Research Description: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Affected versions: max 2.12.4.
Status: vulnerable

Sep 28, 2024

CVE, Research URL: CVE-2024-7761
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: May 16, 2025
Research Description: In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor
Affected versions: max 2.12.2.
Status: vulnerable

Oct 10, 2024

CVE, Research URL: CVE-2024-7762
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: May 16, 2025
Research Description: The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes
Affected versions: max 2.12.16.
Status: vulnerable

Nov 11, 2025

CVE, Research URL: CVE-2025-59579
Home page URL: Security reports for Simple Job Board
Application: Simple Job Board
Date: Oct 22, 2025
Research Description: Insertion of Sensitive Information Into Sent Data vulnerability in PressTigers Simple Job Board simple-job-board allows Retrieve Embedded Sensitive Data.This issue affects Simple Job Board: from n/a through <= 2.13.7.
Affected versions: max 2.13.7.
Status: vulnerable