CVE-2025-30967

CRITICAL

NotFound WPJobBoard - CSRF

Title source: llm

Description

Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard wpjobboard allows Upload a Web Shell to a Web Server.This issue affects WPJobBoard: from n/a through < 5.11.1.

Exploits (1)

nomisec WORKING POC 1 stars

by Anton-ai111 · poc

https://github.com/Anton-ai111/CVE-2025-30967

View Code ZIP pw:eip

References (2)

[Vdb Entry] https://patchstack.com/database/Wordpress/Plugin/wpjobboard/vulnerability/wordpress-wpjobboard-plugin-5-11-1-csrf-to-remote-code-execution-rce-vulnerability?_s_id=cve

[Third Party Advisory] https://patchstack.com/database/wordpress/plugin/wpjobboard/vulnerability/wordpress-wpjobboard-plugin-5-11-1-csrf-to-remote-code-execution-rce-vulnerability?_s_id=cve

Scores

CVSS v3 9.6

EPSS 0.0012

EPSS Percentile 30.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Details

CWE

CWE-352

Status published

Products (1)

NotFound/WPJobBoard < 5.11.1

Published Apr 15, 2025

Tracked Since Feb 18, 2026