CVE WATCH / VULNERABILITY DETAIL
CVE-2025-15703
LOWCVSS 3.5NVD feed
Published 12 October 2026 · tracked since 12 October 2026
Description
The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-area settings page, allowing users with the HireZoot WordPress plugin before 4.0.0's management capability (Administrator by default) to store a p
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-84166 MEDIUM 4.3
- CVE-2026-108805 HIGH 7.3
- CVE-2026-108806 HIGH 7.3
- CVE-2026-107791 MEDIUM 6.5
- CVE-2026-87690 HIGH 8.8
- CVE-2026-21133
- CVE-2026-21134
- CVE-2026-21135
- CVE-2026-21139
- CVE-2026-21125