Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

eyecix — Vulnerabilities & Security Advisories 24

Browse all 24 CVE security advisories affecting eyecix. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Eyecix operates as a specialized software solution, primarily targeting enterprise environments for data management and workflow automation. Security audits have identified twenty-one distinct Common Vulnerabilities and Exposures (CVEs) associated with the platform, indicating a persistent history of security flaws. The most prevalent vulnerability classes include Remote Code Execution (RCE) and Cross-Site Scripting (XSS), which allow attackers to execute arbitrary commands or inject malicious scripts into web pages viewed by other users. Additionally, several instances of privilege escalation have been documented, enabling unauthorized users to gain elevated access levels within the system. These technical weaknesses suggest inadequate input validation and insufficient access controls in earlier versions. While no single catastrophic public breach has been widely reported as a direct result of these specific CVEs, the cumulative risk profile remains significant for organizations relying on the software. Continuous patching and rigorous security testing are essential to mitigate these known exposure points.

CVE ID Title CVSS Severity Published
CVE-2026-84834 WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability — JobSearch CWE-502 9.8 Critical 2026-09-03
CVE-2026-57383 WordPress JobSearch plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability — JobSearch CWE-79 7.1 High 2026-07-13
CVE-2026-54186 WordPress JobSearch plugin <= 3.2.9 - SQL Injection vulnerability — JobSearch CWE-89 9.3 Critical 2026-06-17
CVE-2026-32493 WordPress JobSearch plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability — JobSearch CWE-79 7.1 High 2026-03-25
CVE-2026-25377 WordPress Addon Jobsearch Chat plugin <= 3.0 - SQL Injection vulnerability — Addon Jobsearch Chat CWE-89 9.3 Critical 2026-03-25
CVE-2026-25376 WordPress Addon Jobsearch Chat plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability — Addon Jobsearch Chat CWE-79 7.1 High 2026-03-25
CVE-2025-62025 WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerability — JobSearch CWE-502 9.8 Critical 2025-10-22
CVE-2025-52806 WordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability — JobSearch CWE-98 7.5 High 2025-08-14
CVE-2025-52798 WordPress JobSearch plugin < 3.0.6 - Reflected Cross Site Scripting (XSS) Vulnerability — JobSearch CWE-79 7.1 High 2025-07-04
CVE-2025-49978 WordPress JobSearch plugin < 3.0.6 - Insecure Direct Object References (IDOR) Vulnerability — JobSearch CWE-639 4.3 Medium 2025-06-20
CVE-2024-11917 JobSearch WP Job Board <= 2.9.2 - Authentication Bypass via Social Logins — JobSearch WP Job Board CWE-287 8.1 High 2025-04-25
CVE-2024-11925 WP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation — JobSearch WP Job Board CWE-288 9.8 Critical 2024-11-28
CVE-2024-8615 WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload — JobSearch WP Job Board CWE-434 10.0 Critical 2024-11-06
CVE-2024-8614 WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload — JobSearch WP Job Board CWE-434 9.9 Critical 2024-11-06
CVE-2024-43928 WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability — JobSearch CWE-862 5.4 Medium 2024-11-01
CVE-2024-43929 WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability — JobSearch CWE-862 6.5 Medium 2024-11-01
CVE-2024-43930 WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - Broken Access Control vulnerability — JobSearch CWE-352 4.3 Medium 2024-10-31
CVE-2024-47636 WordPress WP JobSearch plugin <= 2.5.9 - PHP Object Injection vulnerability — JobSearch CWE-502 9.8 Critical 2024-10-10
CVE-2024-47394 WordPress WP JobSearch plugin <= 2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability — JobSearch CWE-79 7.1 High 2024-10-05
CVE-2024-43931 WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability — JobSearch CWE-502 9.8 Critical 2024-08-29
CVE-2024-43245 WordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability — JobSearch CWE-269 9.8 Critical 2024-08-19
CVE-2021-4364 JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function — JobSearch WP Job Board CWE-284 4.3 Medium 2023-06-07
CVE-2021-4361 JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Arbitrary Options Update — JobSearch WP Job Board CWE-284 8.8 High 2023-06-07
CVE-2021-4352 JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Settings Change — JobSearch WP Job Board CWE-284 5.3 Medium 2023-06-07

This page lists every published CVE security advisory associated with eyecix. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.