JobZilla vulnerabilities

JobZilla has 2 known vulnerabilities in this database. The most recent published record is dated 6 Oct 2026.

Known vulnerabilities: 2
Active installs: Not listed
Latest version: Unknown
Last updated: Unknown
Most recent: 6 Oct 2026

Which version do you have installed?

Find it in your WordPress dashboard under Plugins. Severity is based on the CVSS score published with the CVE where one is available.

Vulnerability	Severity	Affected	Fix	Published
Privilege escalation CVE-2026-39775	High 8.8	Up to 2.2	Check for an update	1 d ago
Cross-site request forgery (CSRF) CVE-2025-49382	High 8.8	Up to 2.0	Check for an update	20 Aug 2025

Read the published descriptions

CVE-2026-39775, 6 Oct 2026: Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions. CVE record
CVE-2025-49382, 20 Aug 2025: Cross-Site Request Forgery (CSRF) vulnerability in DexignZone JobZilla - Job Board WordPress Theme jobzilla allows Privilege Escalation.This issue affects JobZilla - Job Board WordPress Theme: from n/a through <= 2.0. CVE record

What to do if you run JobZilla

If you run JobZilla, open WordPress and check the installed version in Plugins. Compare it with the affected versions in the vulnerability record. If a fixed version is available, take a current backup and update to that version or the latest supported release.

If no fixed version exists, consider disabling and removing the plugin or replacing it with a maintained alternative. After dealing with the affected software, check administrator users, unexpected file changes, redirects, unfamiliar pages and security logs for signs that the site may already have been altered.

Email me about new JobZilla vulnerabilities

Free. We email you when a new vulnerability is published for JobZilla, usually within minutes. Confirm by email; unsubscribe any time.

Focus on your business. We’ll take care of your website.

From everyday updates to ongoing care, we keep your website working.

Get website support Call 0208 088 8371