4.3
Medium
CVE-2025-49978 Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting…
Description
Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through < 3.0.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JobSearch 3.0 | earliest → 3.0.6 | No fix stated |
Other CVEs of JobSearch
The 15 CVEs of JobSearch →
CVE-2026-84834
Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions
9.8
Critical
CVE-2026-57383
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch…
7.1
High
CVE-2026-54186
Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions
9.3
Critical
CVE-2026-32493
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch…
7.1
High