Known vulnerabilities in WP Job Manager

Create a careers page for your company website, or build a public job board for your community.

9Reported vulnerabilities

9.8Highest CVSS score

2.4.5Latest version

80,000+Active installs

What to do now

Update WP Job Manager to 2.4.1 or later. 9 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 8, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
WF-61e6db2f-5dfd-44ef-9500-9f0cb5cd67ba	Critical 9.8	—	1.29.2 and earlier	`1.29.3`	March 2, 2018
WF-d8029737-f3ad-4025-948a-ba0298c0869d	High 8.8	—	Before 1.26.2	`1.26.2`	July 11, 2016
WF-b96f40fe-3ffa-4fc5-b51a-ff3771224bd5	High 7.5	—	Before 1.31.3	`1.31.3`	January 7, 2019
CVE-2023-6978	Medium 6.1	0.3%	Before 1.8	`1.8`	December 4, 2024
CVE-2024-34549	Medium 5.3	0.6%	2.2.2 and earlier	`2.3.0`	May 7, 2024
CVE-2026-25404	Medium 5.3	0.2%	2.4.0 and earlier	`2.4.1`	January 29, 2026
CVE-2023-52211	Medium 5.3	0.4%	2.0.0 and earlier	`2.1.0`	January 5, 2024
WF-696d5fe3-1344-461b-a26f-e5099a836c33	Medium 5.4	—	Before 1.23.8	`1.23.8`	August 20, 2015
CVE-2023-52212	Medium 4.3	0.1%	2.0.0 and earlier	`2.1.0`	January 5, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.