Stored XSS Vulnerability in VK Google Job Posting Manager by Vektor, Inc.
CVE-2025-68070
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 16 December 2025
What is CVE-2025-68070?
The VK Google Job Posting Manager by Vektor, Inc. is vulnerable to a Stored XSS issue, allowing attackers to inject malicious scripts into web pages. This vulnerability affects all versions up to and including 1.2.21. If exploited, it can enable attackers to execute arbitrary scripts in the context of users' web browsers, posing a significant security risk to users and their data. It is essential for users of this plugin to apply updates and patches to mitigate the potential impact of this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
VK Google Job Posting Manager <= n/a
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved