Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-0453: Superio – Job Board WordPress Theme

The WP Private Message WordPress plugin (bundled with the Superio theme as a required plugin) before 1.0.6 does not ensure that private messages to be accessed belong to the user making the requests. This allowing any authenticated users to access private messages belonging to other users by tampering the ID.

CVE
Open in Source
#web#google#java#wordpress#php#pdf#auth

Superio – Job Board WordPress theme is a complete Job Board WordPress theme that allows you to create a useful and easy to use job listings website. Using Superio theme, you can create a complete & fully Responsive job portal, career platform to run human resource management, recruitment or job posting website. Superio is not just a job board theme, it’s the best WordPress job portal template choice for anyone who wants a simple job script that makes money.

Features

  • Fields Manager

  • Indeed Jobs Import

  • Career builder Jobs Import

  • Careerjet Jobs Import

  • Ziprecruiter Jobs Import

  • Restrict Job
    - View job page:

    • All (Users, Guests)
    • All Register Users
    • Register Candidates (All registered candidates can view jobs.)
    • Always Hidden

  • Restrict Candidate
    - View candidate page:

    • All (Users, Guests)
    • All Register Users
    • Only Applicants (Employer can view only their own applicants candidates.)
    • Register Employers (All registered employers can view candidates.)
    • Register Employers with package (Registered employers who purchased CV Package can view candidates.)

    - View candidate contact info:

    • All (Users, Guests)
    • All Register Users
    • Only Applicants (Employer can view only their own applicants candidates.)
    • Register Employers (All registered employers can view candidates.)
    • All users can view candidate, but only employers with package can see contact info (Users who purchased Contact Package can see contact info.)

  • Restrict Employer
    - View candidate page:

    • All (Users, Guests)
    • All Register Users
    • Only Applicants (Candidate can view only their own applicants employers.)
    • Register Candidates (All registered candidates can view employers.)
    • Always Hidden

    - View candidate contact info:

    • All (Users, Guests)
    • All Register Users
    • Only Applicants (Candidate can view only their own applicants employers.)
    • Register Candidates (All registered candidates can view employers.)
    • Always Hidden

  • Add a job in frontend

  • Highly Customizable

  • Extensive Admin Interface

  • One click Demo Import

  • No coding knowledge required

  • Page Templates

  • Responsive & Retina Ready

  • Large collection of useful inner pages

  • Choose your grid size

  • Boxed layout option

  • Powerful typography options

  • Translation ready

  • WooCommerce compatible

  • Powerful sorting options for job listings and resumes

  • Multiple ways of showcasing job listings and resumes

  • Listing List shortcode

  • Listing Search shortcode

  • Listing Advanced Search shortcode

  • Listing Simple Search shortcode

  • Resume List shortcode

  • Resume Advanced Search shortcode

  • User login

  • User Dashboard page template

  • Facebook, Google, Twitter, LinkedIn login

  • Facebook, Google, Twitter, LinkedIn apply job

  • Pricing Tables shortcode

  • Comparison Pricing Tables shortcode

  • Smooth Page Transitions

  • Fontawsome & Flaticon

  • User Login Form

  • User Notification

  • Meeting Zoom

  • Here maps

  • Google maps

  • Mapbox maps

Updates History:

Version 1.2.37 – 13 February 2023

* Updated preview job * Updated apply job * Updated reviews * Fixed datepicker in register form

Version 1.2.36 – 07 January 2023

* Updated WooCommerce * Updated upload file * Update apply job * Updated RSS job

Version 1.2.35 – 19 December 2022

* Updated WooCommerce * Updated Download CV * Updated Filter * Updated PHP warning

Version 1.2.34 – 29 November 2022

* Updated job apply * Fixed error application when deleting candidate, job

Version 1.2.33 – 11 November 2022

* Fixed apply for a job

Version 1.2.32 – 07 November 2022

* Updated WooCommerce * Updated meeting form * Updated register form * Updated message in email template * Added notifications in header mobile * Fixed scheduled meeting

Version 1.2.31 – 19 October 2022

* Update candidate filter tag * Update filter custom date field * Updated experience field * Updated cancel package * Updated private message

Version 1.2.30 – 20 September 2022

* Updated WooCommerce * Updated candidate tag default

Version 1.2.29 – 13 September 2022

* Updated packages * Updated upload file

Version 1.2.28 – 25 August 2022

* Updated theme style * Updated calendar * Updated Notification * Updated currency

Version 1.2.27 – 04 August 2022

* Updated email template * Updated Fields Manager

Version 1.2.26 – 26 July 2022

* Updated pricing page * Updated application deadline * Updated thanks email content

Version 1.2.25 – 20 July 2022

* Updated required custom field * Updated google job structure data * Updated application deadline

Version 1.2.24 – 11 July 2022

* Updated job RSS feed * Added thanks email after applied job * Updated notification * Updated elementor element * Updated restrict candidate contact form

Version 1.2.23 – 28 June 2022

* Updated shortlist candidate name * Fixed remove emloyee

Version 1.2.22 – 13 June 2022

* Updated related jobs * Updated job map logo * Added telegram, discord social network

Version 1.2.21 – 04 June 2022

* Updated multiple select field * Updated Apus Posts element * Updated register password * Updated plugin settings

Version 1.2.20 – 18 May 2022

* Updated Theme Font * Updated widgets * Updated employer url * Updated socials link * Updated user description

Version 1.2.19 – 09 May 2022

* Fixed Login user * Updated meeting zoom email varibales

Version 1.2.18 – 04 May 2022

* Updated filter custom fields multiple select * Updated datepicker * Updated meeting date * Added restrict Employer, Candidate fields * Updated register form

Version 1.2.17 – 03 May 2022

* Fixed employer url

Version 1.2.16 – 29 April 2022

* Updated breadcrumbs url * Added filled label * Improved Apus Team element * Fixed create meetings in Approved tab

Version 1.2.15 – 27 April 2022

* Updated date format * Updated filter custom field * Added option for Job Slug, Employer slug, Candidate slug * Update import employer, candidate * Added recapthcha login * Add hidden Job title, Candidate title, Employer title * Updated show/hide password in login/change password form * Updated location display

Version 1.2.14 – 21 April 2022

* Updated employer job count * Updated employer url * Updated cache taxonomy * Updated date format * Updated invite email variables * Updated register password * Updated send email contact subject * Fixed upload file * Fixed upload cv apply

Version 1.2.13 – 04 April 2022

* Updated theme style * Updated mobile menu label * Updated register candidate, register employer * Updated RSS feed * Updated submit job package

Version 1.2.12 – 24 March 2022

* Updated Elementor * Updated Application Dealine

Version 1.2.11 – 22 March 2022

* Updated WooCommerce login/register * Added Job Expired, Candidate Expired page * Updated shortlist job * Updated shortlist candidate * Updated candidate filter form * Updated employer filter form

Version 1.2.10 – 10 March 2022

* Fixed Employer dashboard * Fixed jobs applications

Version 1.2.9 – 03 March 2022

* Updated related Job * Updated Related Candidate * Updated Register Employer, Candidate * Updated apply without login

Version 1.2.8 – 24 February 2022

* Updated jobs category * Updated Logout User * Updated import employer, candidate

Version 1.2.7 – 10 February 2022

* Update footer menu style * Update language

Version 1.2.6 – 20 January 2022

* Updated Jobs page url, Candidates page url, Employer page url * Updated candidate download his resume * Updated meetings message * Fixed filter taxonomy page

Version 1.2.5 – 17 January 2022

* Add Register Tabs * Fixed create Employee * Fixed invite candidate

Version 1.2.4 – 12 January 2022

* Updated Resume builder * Fixed invite candidate apply job

Version 1.2.3 – 11 January 2022

* Fixed PHP error * Updated Invited Candidate * Added Autocomplete search

Version 1.2.2 – 05 January 2022

* Updated logo thumbnail * Updated multiple languages * Updated Rest API

Version 1.2.1 – 20 December 2021

* Updated Apus Posts element * Updated filter button * Updated taxonomy select2 * Updated candidate profile * Updated job alert * Updated candidate alert

Version 1.2.0 – 07 December 2021

* Added more 7 Home pages * Added Phone field for Job * Added select search taxonomy * Added Invite Candidate Apply Job * Add multi currencies * Updated recaptcha * Updated breadcrumbs * Improved filled job

Version 1.1.16 – 16 November 2021

* Added Call to Apply * Updated Employer Dashboard * Fixed candidate category banner * Fixed user packages

Version 1.1.15 – 05 November 2021

* Fixed WPML * Updated Google Struct Data * Updated Job Alert, Candidate Alert

Version 1.1.14 – 15 October 2021

* Updated apply CV * Updated contact email * Updated WPML * Updated salary filter

Version 1.1.13 – 15 October 2021

* Updated megamenu fullwidth * Updated My Jobs page * Updated Job EMployer Info * Add option enable/disable Upload CV in Apply form * Fixed Resume PDF * Updated salary slider * Add show/hide Employer profile * Update upload filte types

Version 1.1.12 – 29 September 2021

* Updated experience date * Updated packages sort * Updated social login * Updated submit job slug * Improved salary display * Improved job filled

Version 1.1.11 – 16 September 2021

* Fixed Employee user * Fixed job applications * Fixed restrict candidates * Updated filter job, employer, candidate * Updated candidate salary * Updated resume creation pdf * Updated user password * Updated Employer categories * Updated header mobile options

Version 1.1.10 – 09 September 2021

* Fixed private message * Fixed load more jobs, candidates, employers * Fixed maps * Fix price currency * Fixed job alert * Fixed register form * Updated user short profile * Updated locations * Updated candidate shortlist * Updated custom fields * Updated translate

Version 1.1.9 – 24 August 2021

* Updated Pagination Load More * Updated Apply Types Field * Added option to change background color for Urgent, Featured items

Version 1.1.8 – 23 August 2021

* Updated region field * Updated upload file * Fixed price currency * Updated breadcrumbs * Updated locations * Updated pagination

Version 1.1.7 – 12 August 2021

* Updated Employer dashboard * Updated filter jobs, candidates, employers * Added show full phone * Added options show header desktop in mobile

Version 1.1.6 – 05 August 2021

* Added Notifications for Employer, Candidate Dashboard * Updated string translate * Updated Restrict Candidate, Employer * Updated region orderby

Version 1.1.5 – 30 July 2021

* Fixed User packages * Added tags field for Candidate * Updated Candidate single page * Updated settings page

Version 1.1.4 – 22 July 2021

* Added job logo field

Version 1.1.3 – 20 July 2021

* Added Apply job without login * Added Required Label * Updated upload file

Version 1.1.2 – 13 July 2021

* Updated pricing packages * Updated my jobs page * Updated job applied status * Updated candidate dashboard * Updated header mobile

Version 1.1.1 – 08 July 2021

* Updated User Profile * Updated package * Updated Register form * Updated Employer dashboard chart

Version 1.1.0 – 01 July 2021

* Added Meeting Zoom * Added Notification * Added register from settings * Added Here Maps * Fixed private message * Update filter form

Version 1.0.13 – 16 June 2021

* Added show job field by package * Added show more button for taxonomy checklist, radio * Fixed CV file url * Fixed candidate dashboard * Updated theme style

Version 1.0.12 – 15 June 2021

* Added dashboard chart * Updated filter * Updated login/register form * Updated font icon for custom field * Fixed number item per page * Improved style for no breadcrumbs

Version 1.0.11 – 11 June 2021

* Updated Job, Candidate, Employer video * Updated Jobs, employers, candidates page with no breadcrumbs

Version 1.0.10 – 10 June 2021

* Update select2 javascript

Version 1.0.9 – 08 June 2021

* Update theme style * Fixed job maps in job preview

Version 1.0.8 – 05 June 2021

* Update job application

Version 1.0.7 – 29 May 2021

* Update responsive * Updated search jobs form * Updated job email apply

Version 1.0.6 – 27 May 2021

* Update fields * Updated filter job * Fixed submit job

Version 1.0.5 – 25 May 2021

* Updated theme style * Updated custom field display * Updated apply job * Fixed edit job

Version 1.0.4 – 25 May 2021

* Updated theme style * Updated theme options * Improve fields manager

Version 1.0.3 – 24 May 2021

* Updated register user * Update email template

Version 1.0.2 – 22 May 2021

* Updated Import Demo Data

Version 1.0.1 – 21 May 2021

* Updated Import Demo Data * Updated theme style

Version 1.0.0 – 20 May 2021

* First release

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE
CVE-2023-6905
CVE
CVE-2023-6903
CVE
CVE-2023-6904
CVE
CVE-2023-3907
CVE