Automattic Wp Job Manager vulnerabilities

4 CVEs affecting Automattic Wp Job Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-25404, published 2026-02-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-34549, published 2024-05-14. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.2.2.
CVE-2023-52211, published 2024-04-12. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Missing Authorization vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.0.0.
CVE-2026-25404, published 2026-02-19. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a…
CVE-2023-52212, published 2026-01-05. Medium severity, CVSS 5.4. EPSS: 0.1% chance of exploitation in the next 30 days. Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager allows Cross Site Request Forgery.This issue affects WP Job Manager: from n/a through 2.0.0.