Known vulnerabilities in Job Postings

WordPress plugin that make it easy to add job postings to your company’s website in a structured way.

13Reported vulnerabilities

7.7Highest CVSS score

2.8.1Latest version

10,000+Active installs

What to do now

Update Job Postings to 2.8.2 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: January 30, 2026 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-10105	Medium 5.9	0.3%	Before 2.7.11	`2.7.11`	March 25, 2025
CVE-2024-10104	Medium 5.9	0.4%	Before 2.7.8	`2.7.8`	November 15, 2024
CVE-2024-0820	Medium 5.4	0.5%	Before 2.7.4	`2.7.4`	March 18, 2024
CVE-2026-39752	High 7.7	0.4%	2.8.2 and earlier	—	October 6, 2026
CVE-2026-23806	High 7.5	0.4%	0 to 2.8 (inclusive)	`2.8.1`	March 25, 2026
CVE-2025-1310	Medium 6.5	0.7%	0 to 2.7.11 (inclusive)	`2.7.12`	March 26, 2025
CVE-2025-68597	Medium 6.5	0.2%	0 to 2.8.1 (inclusive)	—	December 24, 2025
CVE-2025-50050	Medium 6.5	0.2%	0 to 2.7.14 (inclusive)	`2.7.15`	June 20, 2025
CVE-2026-18063	Medium 6.4	0.2%	0 to 2.8.1 (inclusive)	`2.8.2`	September 15, 2026
CVE-2024-2833	Medium 6.1	0.4%	Before 2.7.6	`2.7.6`	April 18, 2024
CVE-2024-32149	Medium 6.1	0.4%	Before 2.7.6	`2.7.6`	April 15, 2024
CVE-2022-44743	Medium 5.4	0.4%	Before 2.6.0	`2.6.0`	April 23, 2023
CVE-2023-26017	Medium 4.8	0.4%	Before 2.5.11	`2.5.11`	May 3, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.