Js Job Manager
Vendor:
First CVE: Aug 16, 2019 · Active for 6 years
11
Total CVEs
More Total CVEs than 90% of tracked products
2.8
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 51% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Js Job Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 16, 2019
6 years ago
Most Recent CVE
Sep 22, 2025
309 days ago
CVE Severity & Scoring
Js Job Manager11 CVEs
45%
36%
18%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network11 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (90.9%)
High1 (9.1%)
Unknown0 (0.0%)
User Interaction
None7 (63.6%)
Unknown0 (0.0%)
Required4 (36.4%)
Privileges Required
Low4 (36.4%)
High1 (9.1%)
None6 (54.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-32660CRITICAL Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/ | Apr 17, 2025 | 9.8 | 27 | NO | NO |
CVE-2018-20974HIGH The js-jobs plugin before 1.0.7 for WordPress has CSRF. | Aug 16, 2019 | 8.8 | 26 | NO | NO |
CVE-2025-32626CRITICAL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job | Apr 17, 2025 | 9.8 | 25 | NO | NO |
CVE-2025-32146HIGH Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclus | Apr 4, 2025 | 8.8 | 24 | NO | NO |
CVE-2023-31087HIGH Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions. | Nov 9, 2023 | 8.8 | 24 | NO | NO |
CVE-2025-32627HIGH Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclus | Apr 11, 2025 | 8.1 | 22 | NO | NO |
CVE-2025-58234MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Man | Sep 22, 2025 | 5.4 | 19 | NO | NO |
CVE-2023-28689MEDIUM Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a th | Dec 9, 2024 | 6.5 | 17 | NO | NO |
CVE-2025-31868MEDIUM Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: fro | Apr 1, 2025 | 5.3 | 16 | NO | NO |
CVE-2025-31867MEDIUM Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue | Apr 1, 2025 | 5.4 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Js Job Manager
Top CWEs
Versions
No cataloged versions.