<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: jobify</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-13698: The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and modification of </title><link>https://patchthecve.com/cve/CVE-2024-13698.html</link><guid>https://patchthecve.com/cve/CVE-2024-13698.html</guid><pubDate>Wed, 17 Jun 2026 07:02:33 +0000</pubDate><description>MEDIUM 6.5: The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the &#x27;download_image_via_ai&#x27; and &#x27;generate_image_via_ai&#x27; functions in all versions up to, and including, 4.2.7. This makes it possible for unauthenti</description></item><item><title>CVE-2024-52480: Missing Authorization vulnerability in Astoundify Jobify jobify.This issue affects Jobify: from n/a through &lt; </title><link>https://patchthecve.com/cve/CVE-2024-52480.html</link><guid>https://patchthecve.com/cve/CVE-2024-52480.html</guid><pubDate>Wed, 17 Jun 2026 08:07:18 +0000</pubDate><description>MEDIUM 5.3: Missing Authorization vulnerability in Astoundify Jobify jobify.This issue affects Jobify: from n/a through &lt; 4.3.0.</description></item><item><title>CVE-2024-52479: Cross-Site Request Forgery (CSRF) vulnerability in Astoundify Jobify jobify allows Cross Site Request Forgery.</title><link>https://patchthecve.com/cve/CVE-2024-52479.html</link><guid>https://patchthecve.com/cve/CVE-2024-52479.html</guid><pubDate>Wed, 17 Jun 2026 08:07:18 +0000</pubDate><description>MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Astoundify Jobify jobify allows Cross Site Request Forgery.This issue affects Jobify: from n/a through &lt; 4.3.0.</description></item><item><title>CVE-2024-52478: Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in Astoundi</title><link>https://patchthecve.com/cve/CVE-2024-52478.html</link><guid>https://patchthecve.com/cve/CVE-2024-52478.html</guid><pubDate>Wed, 17 Jun 2026 08:07:18 +0000</pubDate><description>MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in Astoundify Jobify jobify allows Stored XSS.This issue affects Jobify: from n/a through &lt; 4.3.0.</description></item><item><title>CVE-2024-52481: Improper Limitation of a Pathname to a Restricted Directory (&#x27;Path Traversal&#x27;) vulnerability in Astoundify Job</title><link>https://patchthecve.com/cve/CVE-2024-52481.html</link><guid>https://patchthecve.com/cve/CVE-2024-52481.html</guid><pubDate>Wed, 17 Jun 2026 08:07:18 +0000</pubDate><description>HIGH 7.5: Improper Limitation of a Pathname to a Restricted Directory (&#x27;Path Traversal&#x27;) vulnerability in Astoundify Jobify jobify allows Relative Path Traversal.This issue affects Jobify: from n/a through &lt; 4.3.0.</description></item></channel></rss>