<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: presstigers</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-7762: The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowin</title><link>https://patchthecve.com/cve/CVE-2024-7762.html</link><guid>https://patchthecve.com/cve/CVE-2024-7762.html</guid><pubDate>Wed, 17 Jun 2026 08:20:52 +0000</pubDate><description>LOW 3.7: The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes</description></item><item><title>CVE-2024-7761: In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that </title><link>https://patchthecve.com/cve/CVE-2024-7761.html</link><guid>https://patchthecve.com/cve/CVE-2024-7761.html</guid><pubDate>Wed, 17 Jun 2026 08:20:52 +0000</pubDate><description>MEDIUM 6.1: In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor</description></item><item><title>CVE-2023-47188: Missing Authorization vulnerability in PressTigers Simple Job Board simple-job-board allows Exploiting Incorre</title><link>https://patchthecve.com/cve/CVE-2023-47188.html</link><guid>https://patchthecve.com/cve/CVE-2023-47188.html</guid><pubDate>Wed, 17 Jun 2026 06:32:19 +0000</pubDate><description>MEDIUM 5.3: Missing Authorization vulnerability in PressTigers Simple Job Board simple-job-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through &lt;= 2.10.5.</description></item><item><title>CVE-2024-7351: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inc</title><link>https://patchthecve.com/cve/CVE-2024-7351.html</link><guid>https://patchthecve.com/cve/CVE-2024-7351.html</guid><pubDate>Wed, 17 Jun 2026 08:19:55 +0000</pubDate><description>HIGH 7.2: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP O</description></item><item><title>CVE-2024-1813: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inc</title><link>https://patchthecve.com/cve/CVE-2024-1813.html</link><guid>https://patchthecve.com/cve/CVE-2024-1813.html</guid><pubDate>Wed, 17 Jun 2026 07:05:03 +0000</pubDate><description>CRITICAL 9.8: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If </description></item></channel></rss>