Known vulnerabilities in the Js Job Manager plugin
11 security advisories have been published for the Js Job Manager plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Js Job Manager - Cross-Site Scripting (XSS) (CVE-2025-58234) MEDIUM
- Js Job Manager - Arbitrary File Upload (CVE-2025-32660) CRITICAL
- Js Job Manager - SQL Injection (CVE-2025-32626) CRITICAL
- Js Job Manager - Path Traversal (CVE-2025-32627) HIGH
- Js Job Manager - Path Traversal (CVE-2025-32146) HIGH
- Js Job Manager - Broken Access Control (CVE-2025-31867) MEDIUM
- Js Job Manager - Broken Access Control (CVE-2025-31868) MEDIUM
- Js Job Manager - Broken Access Control (CVE-2023-28689) MEDIUM
- Js Job Manager - Cross-Site Request Forgery (CSRF) (CVE-2023-31087) MEDIUM
- Js Job Manager - Cross-Site Scripting (XSS) (CVE-2023-25963) MEDIUM
- Js Job Manager - Cross-Site Request Forgery (CSRF) (CVE-2018-20974) HIGH