Matador Jobs Lite Security & Risk Analysis

wordpress.org/plugins/matador-jobs

Connect your WordPress site with your Applicant Tracking System. Cache job data locally and display it with style inside your WordPress theme.

20 active installs v3.9.9 PHP 8.1+ WP 5.5.0+ Updated May 7, 2025
atsbullhorncareer-portaljob-boardoscp
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Matador Jobs Lite Safe to Use in 2026?

Generally Safe

Score 100/100

Matador Jobs Lite has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11mo ago
Risk Assessment

The "matador-jobs" plugin v3.9.9 exhibits a strong security posture, largely due to robust implementation of security best practices. The absence of any known CVEs, critical or high-severity taint flows, and the consistent use of prepared statements for all SQL queries are highly commendable. The plugin also demonstrates good adherence to output escaping and includes nonce and capability checks on its entry points. File operations and external HTTP requests are present, which are common for plugins of this nature, but the static analysis suggests these are handled with care.

While the plugin appears to be well-secured, a single flow with unsanitized paths in the taint analysis warrants attention. Although it did not reach critical or high severity, this indicates a potential area where user-supplied input might not be adequately validated before being used in a sensitive operation. The large number of shortcodes, while not directly indicating a vulnerability, does increase the attack surface and requires diligent security oversight for each. Overall, "matador-jobs" v3.9.9 is in good shape, with the primary area for improvement being the resolution of the identified unsanitized path flow to further strengthen its security.

Key Concerns

  • Flow with unsanitized paths detected
Vulnerabilities
None known

Matador Jobs Lite Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Matador Jobs Lite Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
6 prepared
Unescaped Output
43
757 escaped
Nonce Checks
13
Capability Checks
14
File Operations
11
External Requests
14
Bundled Libraries
0

SQL Query Safety

100% prepared6 total queries

Output Escaping

95% escaped800 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

4 flows1 with unsanitized paths
<jobs-taxonomies-datalist> (templates\jobs-taxonomies-datalist.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Matador Jobs Lite Attack Surface

Entry Points27
Unprotected0

AJAX Handlers 1

authwp_ajax_matador_api_job_syncincludes\class-job-listing.php:74

Shortcodes 26

[matador_job] includes\class-shortcodes.php:40
[matador_job_field] includes\class-shortcodes.php:41
[matador_jobs] includes\class-shortcodes.php:42
[matador_jobs_list] includes\class-shortcodes.php:43
[matador_jobs_table] includes\class-shortcodes.php:44
[matador_jobs_listing] includes\class-shortcodes.php:45
[matador_portal] includes\class-shortcodes.php:46
[matador_taxonomy] includes\class-shortcodes.php:47
[matador_categories] includes\class-shortcodes.php:48
[matador_types] includes\class-shortcodes.php:49
[matador_locations] includes\class-shortcodes.php:50
[matador_search] includes\class-shortcodes.php:51
[matador_application] includes\class-shortcodes.php:52
[matador_general_application_link] includes\class-shortcodes.php:53
[matador_jobs_orderby] includes\class-shortcodes.php:54
[bullhorn] includes\deprecated.php:25
[bullhorn_categories] includes\deprecated.php:64
[bullhorn_states] includes\deprecated.php:82
[bullhorn_search] includes\deprecated.php:100
[bullhorn_cv_form] includes\deprecated.php:118
[bullhorn_cv_form_with_jobs] includes\deprecated.php:136
[b2wp_resume_form] includes\deprecated.php:154
[b2wp_application] includes\deprecated.php:172
[b2wp_application_with_jobs] includes\deprecated.php:190
[b2wp_application_with_job_text] includes\deprecated.php:208
[b2wp_shortapp] includes\deprecated.php:226
WordPress Hooks 187
actionplugins_loadedclass-matador.php:178
actioninitclass-matador.php:180
actionadmin_noticesincludes\admin\class-admin-notices.php:51
actionadmin_noticesincludes\admin\class-admin-notices.php:52
actioncurrent_screenincludes\admin\class-admin-tasks.php:33
actioninitincludes\admin\class-admin-tasks.php:34
actioninitincludes\admin\class-admin-tasks.php:35
actionadmin_menuincludes\admin\class-bullhorn-connection-assistant.php:57
actionadmin_headincludes\admin\class-bullhorn-connection-assistant.php:58
filteradmin_titleincludes\admin\class-bullhorn-connection-assistant.php:59
actioncurrent_screenincludes\admin\class-bullhorn-connection-assistant.php:60
actionadmin_menuincludes\admin\class-options.php:43
actioncurrent_screenincludes\admin\class-options.php:44
actionmatador_options_after_setincludes\admin\class-settings-actions.php:34
actionmatador_options_after_setincludes\admin\class-settings-actions.php:35
actionmatador_options_before_set_license_coreincludes\admin\class-settings-actions.php:36
filtermatador_settings_after_field_post_type_slug_job_listingincludes\admin\class-settings-fields.php:56
filtermatador_settings_after_field_bullhorn_ignore_career_portal_rootincludes\admin\class-settings-fields.php:57
filtermatador_options_fields_jobs_slugsincludes\admin\class-settings-fields.php:1013
filtermatador_options_fields_jobs_importincludes\admin\class-settings-fields.php:1017
filtermatador_options_fields_applications_privacyincludes\admin\class-settings-fields.php:1022
filtermatador_options_fieldsincludes\admin\class-settings-fields.php:1027
filtermatador_options_fieldsincludes\admin\class-settings-fields.php:1030
filtermatador_options_validateincludes\admin\class-settings-validators.php:31
filtermatador_options_validateincludes\admin\class-settings-validators.php:32
filtermatador_options_validateincludes\admin\class-settings-validators.php:33
filtermatador_options_get_applications_syncincludes\admin\class-settings.php:55
actionadmin_menuincludes\admin\class-upgrade.php:50
actioncurrent_screenincludes\admin\class-upgrade.php:51
filtermatador_variable_bullhorn_api_credentials_keyincludes\bullhorn\class-bullhorn-connection.php:81
actionmatador_bullhorn_before_importincludes\bullhorn\class-bullhorn-import.php:62
actionmatador_bullhorn_import_save_jobincludes\bullhorn\class-bullhorn-import.php:63
actionmatador_bullhorn_import_save_jobincludes\bullhorn\class-bullhorn-import.php:64
actionmatador_bullhorn_import_save_jobincludes\bullhorn\class-bullhorn-import.php:65
actionmatador_bullhorn_import_save_jobincludes\bullhorn\class-bullhorn-import.php:66
actionmatador_bullhorn_import_save_jobincludes\bullhorn\class-bullhorn-import.php:67
actionmatador_bullhorn_import_save_jobincludes\bullhorn\class-bullhorn-import.php:68
actionmatador_bullhorn_import_save_jobincludes\bullhorn\class-bullhorn-import.php:69
actionmatador_bullhorn_import_save_jobincludes\bullhorn\class-bullhorn-import.php:70
filtermatador_save_job_metaincludes\bullhorn\class-bullhorn-import.php:72
filtermatador_bullhorn_doing_jobs_syncincludes\bullhorn\class-bullhorn-import.php:91
filtermatador_application_fields_descriptions_colonincludes\class-application-handler.php:560
actionmatador_activity_log_entry_after_writeincludes\class-application-sync.php:382
actioninitincludes\class-application.php:46
filterpost_date_column_statusincludes\class-application.php:47
actionmanage_posts_extra_tablenavincludes\class-application.php:50
actionmanage_posts_extra_tablenavincludes\class-application.php:53
actionmanage_posts_extra_tablenavincludes\class-application.php:54
actionpre_get_postsincludes\class-application.php:58
actionadd_meta_boxesincludes\class-application.php:59
actionadd_meta_boxesincludes\class-application.php:60
actionmatador_new_job_applicationincludes\class-application.php:61
actionmatador_submissions_table_statusincludes\class-application.php:63
actionmatador_submissions_table_statusincludes\class-application.php:64
actionmedia_buttonsincludes\class-application.php:66
actionmatador_admin_submission_single_action_buttonsincludes\class-application.php:67
actionbefore_delete_postincludes\class-application.php:69
filterwp_mail_content_typeincludes\class-email.php:65
actioninitincludes\class-endpoints.php:29
actionquery_varsincludes\class-endpoints.php:30
actionparse_requestincludes\class-endpoints.php:31
filterupload_mimesincludes\class-helper.php:66
filterwp_check_filetype_and_extincludes\class-helper.php:68
actionmatador_application_after_fieldsincludes\class-honeypot.php:48
actionmatador_application_handler_startincludes\class-honeypot.php:49
filtermatador_application_handler_start_ignored_fieldsincludes\class-honeypot.php:50
actioninitincludes\class-job-listing.php:36
actionpre_get_postsincludes\class-job-listing.php:38
actionpre_get_postsincludes\class-job-listing.php:39
actioncurrent_screenincludes\class-job-listing.php:41
actionadmin_menuincludes\class-job-listing.php:42
filterthe_contentincludes\class-job-listing.php:43
filtercomments_openincludes\class-job-listing.php:45
filtermatador_job_application_contentincludes\class-job-listing.php:47
filtermatador_job_detail_contentincludes\class-job-listing.php:48
filterwp_headincludes\class-job-listing.php:51
actionpre_get_postsincludes\class-job-listing.php:56
actionpre_get_postsincludes\class-job-listing.php:58
filterpre_get_postsincludes\class-job-listing.php:59
actiontransition_post_statusincludes\class-job-listing.php:62
actionbefore_delete_postincludes\class-job-listing.php:63
actionmedia_buttonsincludes\class-job-listing.php:65
actionmanage_posts_extra_tablenavincludes\class-job-listing.php:66
actionmatador_save_jobincludes\class-job-listing.php:68
actioncurrent_screenincludes\class-job-listing.php:71
actionwpincludes\class-job-listing.php:76
filtermatador_template_jobs_pagination_afterincludes\class-job-listing.php:82
actioninitincludes\class-job-listing.php:84
filteracf/settings/remove_wp_meta_boxincludes\class-job-listing.php:105
filtermatador_bullhorn_import_the_job_whereincludes\class-job-listing.php:202
filtermatador_bullhorn_delete_missing_job_on_importincludes\class-job-listing.php:206
filtermatador_bullhorn_import_the_job_whereincludes\class-job-listing.php:1213
filtermatador_bullhorn_delete_missing_job_on_importincludes\class-job-listing.php:1217
actioninitincludes\class-job-taxonomies.php:36
actioninitincludes\class-job-taxonomies.php:37
actionpre_get_postsincludes\class-job-taxonomies.php:38
filtertaxonomy_template_hierarchyincludes\class-job-taxonomies.php:39
filtermatador_job_taxonomiesincludes\class-job-taxonomies.php:107
filtermatador_variable_job_taxonomiesincludes\class-job-taxonomies.php:113
actioncron_schedulesincludes\class-scheduled-events.php:55
actioninitincludes\class-scheduled-events.php:57
actionmatador_syncincludes\class-scheduled-events.php:59
filtermatador_schedulable_eventsincludes\class-scheduled-events.php:61
actionmatador_sync_applicationsincludes\class-scheduled-events.php:63
actionmatador_sync_jobsincludes\class-scheduled-events.php:66
actionmatador_job_sync_nowincludes\class-scheduled-events.php:67
actionmatador_sync_continueincludes\class-scheduled-events.php:68
actionmatador_sync_jobsincludes\class-scheduled-events.php:70
actionmatador_job_sync_nowincludes\class-scheduled-events.php:71
actionwp_enqueue_scriptsincludes\class-scripts.php:27
actionwp_enqueue_scriptsincludes\class-scripts.php:28
actionadmin_enqueue_scriptsincludes\class-scripts.php:29
actionadmin_enqueue_scriptsincludes\class-scripts.php:30
actionenqueue_block_editor_assetsincludes\class-scripts.php:33
filtermatador_doing_custom_loopincludes\class-template-support.php:292
filtermatador_variable_accepted_files_typesincludes\class-variables.php:46
filtermatador_variable_application_name_suffixesincludes\class-variables.php:47
filtermatador_rewrites_taxonomyincludes\deprecated.php:270
actionmatador_taxonomy_terms_beforeincludes\deprecated.php:302
actionmatador_taxonomy_terms_beforeincludes\deprecated.php:334
actionmatador_taxonomy_terms_before_termsincludes\deprecated.php:362
actionmatador_taxonomy_terms_before_termsincludes\deprecated.php:396
actionmatador_taxonomy_terms_before_termincludes\deprecated.php:428
filtermatador_taxonomy_terms_term_labelincludes\deprecated.php:454
actionmatador_taxonomy_terms_after_termincludes\deprecated.php:492
actionmatador_taxonomy_terms_after_termsincludes\deprecated.php:518
actionmatador_taxonomy_terms_after_termsincludes\deprecated.php:550
actionmatador_taxonomy_terms_afterincludes\deprecated.php:584
actionmatador_taxonomy_terms_afterincludes\deprecated.php:616
filtermatador_taxonomy_terms_all_term_labelincludes\deprecated.php:650
filtermatador_taxonomy_terms_arg_methodincludes\deprecated.php:685
filtermatador_taxonomy_terms_arg_show_all_optionincludes\deprecated.php:717
filtermatador_submit_candidate_candidate_dataincludes\deprecated.php:750
filtermatador_submit_candidate_candidate_dataincludes\deprecated.php:786
filtermatador_submit_candidate_notes_message_labelincludes\deprecated.php:822
filtermatador_submit_candidate_notes_jobs_labelincludes\deprecated.php:856
filtermatador_template_the_job_description_excerpt_moreincludes\deprecated.php:889
filtermatador_bullhorn_import_the_job_whereincludes\deprecated.php:924
filtermatador_bullhorn_import_skip_job_on_updateincludes\deprecated.php:955
filtermatador_bullhorn_Candidate_consentMgmt_objectincludes\deprecated.php:993
filtermatador_locate_templateincludes\deprecated.php:1042
actionadmin_initmatador-jobs.php:55
actionadmin_initmatador-jobs.php:69
actioncli_initsrc\CommandLine\Matador.php:37
actioninitsrc\Core\Monitor.php:37
actioninitsrc\Core\Monitor.php:38
actionwp_loadedsrc\Core\Update.php:187
actionadmin_menusrc\Developer\BullhornAPIDebugger.php:39
actionadmin_menusrc\Developer\DeveloperTools.php:42
filtermatador_admin_developer_toolssrc\Developer\DevToolAbstract.php:57
filterblock_categories_allsrc\Editors\Blocks\Blocks.php:41
actioninitsrc\Editors\Blocks\Blocks.php:42
actionenqueue_block_editor_assetssrc\Editors\Blocks\Blocks.php:43
actionmatador_new_job_applicationsrc\Email\ApplicationApplicantMessage.php:58
actionmatador_new_job_application_failedsrc\Email\ApplicationApplicantMessage.php:59
actionmatador_new_job_applicationsrc\Email\ApplicationRecruiterMessage.php:61
actionmatador_new_job_application_failedsrc\Email\ApplicationRecruiterMessage.php:62
actionmatador_bullhorn_candidatesrc\Email\ApplicationRecruiterMessage.php:63
filterwp_mail_content_typesrc\Email\Email.php:391
actioninitsrc\Extension\ExtensionTrait.php:144
filtermatador_locate_template_additional_directoriessrc\Extension\ExtensionTrait.php:146
actionplugins_loadedsrc\Extension\ExtensionTrait.php:148
actionplugins_loadedsrc\Extension\ExtensionTrait.php:150
filtermatador_jobs_general_countriessrc\Integrations\Bullhorn\Bullhorn.php:35
filtermatador_application_field_should_skipsrc\Integrations\Bullhorn\Bullhorn.php:36
actionrest_api_initsrc\Rest\Endpoint\EndpointAbstract.php:73
filterpre_set_site_transient_update_pluginssrc\SoftwareLicensing\Update.php:98
filterplugins_apisrc\SoftwareLicensing\Update.php:99
actionafter_plugin_rowsrc\SoftwareLicensing\Update.php:100
actionadmin_initsrc\SoftwareLicensing\Update.php:101
filtermatador_bullhorn_doing_jobs_syncsrc\Sync\Bullhorn\Jobs.php:120
actioninitsrc\ThirdParty\Akismet\Akismet.php:37
filtermatador_application_data_rawsrc\ThirdParty\Akismet\Akismet.php:49
filteraioseo_schema_outputsrc\ThirdParty\AllInOneSeo\AllInOneSeo.php:41
filterrank_math/json_ldsrc\ThirdParty\RankMath\RankMath.php:42
filterwpml_get_translated_slugsrc\ThirdParty\WPML\WPML.php:41
filterwpseo_schema_graph_piecessrc\ThirdParty\Yoast\Yoast.php:41
filterYoast\WP\SEO\automatic_redirection_post_typessrc\ThirdParty\Yoast\Yoast.php:42
filterthe_titletemplates\template-actions-filters.php:18
filtermatador_job_confirmation_headlinetemplates\template-actions-filters.php:61
filtermatador_template_the_job_meta_bullhorn_job_idtemplates\template-actions-filters.php:82
actionmatador_job_before_contenttemplates\template-actions-filters.php:103
actionmatador_job_before_contenttemplates\template-actions-filters.php:127
actionmatador_application_before_fieldstemplates\template-actions-filters.php:147
actionmatador_job_after_contenttemplates\template-actions-filters.php:171
actionmatador_job_after_contenttemplates\template-actions-filters.php:204
actionmatador_jobs_aftertemplates\template-actions-filters.php:222

Scheduled Events 5

matador_job_sync_now
matador_sync
matador_sync
matador_sync_applications
matador_sync_continue
Maintenance & Trust

Matador Jobs Lite Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMay 7, 2025
PHP min version8.1
Downloads12K

Community Trust

Rating0/100
Number of ratings0
Active installs20
Developer Profile

Matador Jobs Lite Developer Profile

Paul Bearne

6 plugins · 5K total installs

91
trust score
Avg Security Score
95/100
Avg Patch Time
22 days
View full developer profile
Detection Fingerprints

How We Detect Matador Jobs Lite

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/matador-jobs/assets/css/matador-styles.css/wp-content/plugins/matador-jobs/assets/css/matador-styles.min.css/wp-content/plugins/matador-jobs/assets/css/matador-basic-styles.css/wp-content/plugins/matador-jobs/assets/css/matador-basic-styles.min.css/wp-content/plugins/matador-jobs/assets/scripts/vendor/jquery.validate.min.js/wp-content/plugins/matador-jobs/assets/scripts/jquery.validate.localization.js/wp-content/plugins/matador-jobs/assets/scripts/jquery.validate.localization.min.js/wp-content/plugins/matador-jobs/assets/scripts/matador.js+8 more
Script Paths
/wp-content/plugins/matador-jobs/assets/scripts/vendor/jquery.validate.min.js/wp-content/plugins/matador-jobs/assets/scripts/jquery.validate.localization.min.js/wp-content/plugins/matador-jobs/assets/scripts/matador.min.js/wp-content/plugins/matador-jobs/assets/scripts/matador-orderby.min.js/wp-content/plugins/matador-jobs/includes/admin/blocks/build/index.js
Version Parameters
matador-jobs/assets/css/matador-styles.css?ver=matador-jobs/assets/css/matador-basic-styles.css?ver=matador-jobs/assets/scripts/jquery.validate.localization.js?ver=matador-jobs/assets/scripts/matador.js?ver=matador-jobs/assets/scripts/matador-orderby.js?ver=matador-jobs/assets/css/matador-admin-styles.css?ver=matador-jobs/assets/scripts/matador-admin.js?ver=matador-jobs/includes/admin/blocks/build/index.js?ver=1.0.0

HTML / DOM Fingerprints

CSS Classes
matador-jobs-containermatador-jobs-listmatador-job-listingmatador-job-titlematador-job-companymatador-job-locationmatador-job-descriptionmatador-job-apply-button+16 more
HTML Comments
<!-- Matador Jobs Board --><!-- Begin Matador Jobs --><!-- End Matador Jobs --><!-- Matador Jobs Lite -->
Data Attributes
data-matador-jobs-iddata-matador-search-urldata-matador-jobs-per-pagedata-matador-jobs-orderdata-matador-jobs-orderbydata-matador-jobs-category+5 more
JS Globals
matador_javascript_localizematadorAdminDatajquery_validate_localization
REST Endpoints
/wp-json/matador-jobs/v1/jobs/wp-json/matador-jobs/v1/categories/wp-json/matador-jobs/v1/locations/wp-json/matador-jobs/v1/search
Shortcode Output
[matador_jobs][matador_job_listing][matador_jobs_search][matador_jobs_filters]
FAQ

Frequently Asked Questions about Matador Jobs Lite