InWave Jobs vulnerabilities

2 known vulnerabilities in InWave Jobs from Sfwebservice. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  InWave Jobs: Missing Authorization

  CVE-2025-39477Jan 6, 2026Sfwebservice

  Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWave Jobs: from n/a through 3.5.8.

• 9.8 Critical severity

  InWave Jobs: Missing Authentication for Critical Functionality

  CVE-2025-1315Mar 7, 2025Sfwebservice

  The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possi