WP Job Portal

Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection vulnerability <= 2.2.8

Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download vulnerability <= 2.2.6

Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion vulnerability <= 2.2.6

Missing Authorization to Unauthenticated Arbitrary Email Sending vulnerability <= 2.2.6

Insecure Direct Object Reference to Unauthenticated Company Logo Deletion vulnerability <= 2.2.6