intensewp vulnerabilities
Recent CVEs affecting intensewp products. 2 tracked.
intensewp has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-09-26. Highest priority: CVE-2017-9603 (score 59/100).
- CVE-2017-9603 HIGH 8.8 UPGRADE SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execu
- CVE-2017-14751 MEDIUM 6.1 DOWNGRADE The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field.
FAQ
How do I fix intensewp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is intensewp being exploited right now?
None of the tracked intensewp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which intensewp CVE should I patch first?
CVE-2017-9603 currently ranks highest (59/100): SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execu.