Stored Cross-Site Scripting in Workable API Plugin for WordPress

CVE-2025-8721

What is CVE-2025-8721?

The Workable API plugin for WordPress is susceptible to a Stored Cross-Site Scripting flaw through its workable_jobs shortcode. In all versions leading up to 1.0.4, the plugin fails to properly sanitize and escape user-supplied attributes. This vulnerability permits authenticated attackers with contributor-level access and higher to insert arbitrary web scripts into pages, which can be executed when users view the compromised pages.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References