Sfwebservice vulnerabilities
Published CVEs affecting Sfwebservice products: 1 record(s), with severity, exploitation and fixes.
CVE-2025-39477
Critical · 9.8
CWE-862 Jan 6, 2026
WordPress InWave Jobs Plugin <= 3.5.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWave Jobs: from n/a through 3.5.8.