PatchTheCVEastoundify vulnerabilities
Recent CVEs affecting astoundify products. 6 tracked.
astoundify has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-01-24. Highest priority: CVE-2024-52481 (score 44/100).
- CVE-2024-52481 HIGH 7.5 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Astoundify Job
- CVE-2024-52480 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Astoundify Jobify jobify.This issue affects Jobify: from n/a through <
- CVE-2024-52479 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Astoundify Jobify jobify allows Cross Site Request Forgery.
- CVE-2024-52478 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Astoundi
- CVE-2024-13698 MEDIUM 6.5 UPGRADE The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and modification of
- CVE-2023-6978 MEDIUM 6.1 UPGRADE The WP Job Manager – Company Profiles plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via
FAQ
How do I fix astoundify vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is astoundify being exploited right now?
None of the tracked astoundify CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which astoundify CVE should I patch first?
CVE-2024-52481 currently ranks highest (44/100): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Astoundify Job.