CyberSecBulletin

Sfwebservice vulnerabilities

We track 2 vulnerabilities in Sfwebservice products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 6, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Sfwebservice vulnerabilities

  • 9.8 Critical severity

    InWave Jobs: Missing Authorization

    CVE-2025-39477Sfwebservice

    Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWave Jobs: from n/a through 3.5.8.

  • 9.8 Critical severity

    InWave Jobs: Missing Authentication for Critical Functionality

    CVE-2025-1315Sfwebservice

    The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possi