WP JobHunt vulnerabilities
We track 6 vulnerabilities in WP JobHunt products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on December 20, 2025.
Latest WP JobHunt vulnerabilities
- 7.6 High severity
WP JobHunt: Missing Authorization
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes
- 8.1 High severity
The WP JobHunt plugin for WordPress is vulnerable to Insecure Direct Object Reference in all…
The WP JobHunt plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.2 via the cs_remove_profile_callback() function due to missing validation on a user controlled key. This makes it possible for authent
- 9.8 Critical severity
WP JobHunt: Authentication Bypass Using an Alternate Path or Channel
The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the cs_parse_request() function. This
- 9.8 Critical severity
WP JobHunt: Authorization Bypass Through User-Controlled Key
The WP JobHunt plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 7.1. This is due to the plugin not properly validating a user's identity prior to updating their details like email via the acc
- 9.8 Critical severity
WP JobHunt: Authorization Bypass Through User-Controlled Key
The WP JobHunt plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.9. This is due to the plugin not properly validating a user's identity prior to updating their password through the account_s
- 7.5 High severity
WP JobHunt: Authentication Bypass by Alternate Name
The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1. This is due to wp_ajax_google_api_login_callback function not properly verifying a user's identity prior to authenticating them. This makes it