WP Manifestindependent plugin directory
manifest / integrations / smartrecruiters-wp-job-importer

SmartRecruiters Job Importer WP Registry grade D+. High-severity findings · 3 findingsWP RegistryHigh-severity findings · 3 findingsOpen the reportD+

WordPress plugin to import job postings from SmartRecruiters API into a custom post type. Includes Elementor compatibility, dynamic fields, SEO-friendly job pages, and optional category filtering (departments). Ideal for career pages using SmartRecruiters.

★ 0stars
8release downloads
≈10active sites
v.1.0.1latest · 11mo ago

Install

Download smartrecruiters-wp-job-importer-v1.0.0.zip From the v.1.0.0 release on GitHub, Aug 5, 2025

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/publicom/smartrecruiters-wp-job-importer/releases/download/v.1.0.0/smartrecruiters-wp-job-importer-v1.0.0.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

SmartRecruiters Job Importer for WordPress

A WordPress plugin that imports job postings from the SmartRecruiters API into a Custom Post Type (SR Jobs).
Perfect for building an SEO-friendly Career Page with Elementor or fallback templates.


✅ Features

  • Fetch job offers from SmartRecruiters API and store them as custom posts.
  • Custom Post Type: SR Jobs.
  • Stores and updates key fields as custom meta:
    • contract_type
    • rythme (Employment type)
    • location
    • department
    • apply_url
  • Elementor Ready:
    • Dynamic Tags for all custom fields.
    • Build your Single and Archive templates easily.
  • Fallback Templates Included:
    • archive-sr_job.php → Job list with department filter.
    • single-sr_job.php → Displays full job description and meta.
  • Automatic or Manual Import:
    • Manual: Import Now button.
    • Automatic: Cron-based (frequency configurable).
  • Selective Import:
    • Filter jobs by department from admin.
  • SEO-friendly (each job = its own page).
  • Video Support:
    • Detects videos from jobAd.sections.videos and embeds YouTube automatically.
  • Handles Updates:
    • Updates existing jobs based on SmartRecruiters id.
    • Removes jobs missing from the API (optional).

🚀 Installation

  1. Download or clone the plugin:
    git clone https://github.com/publicom/smartrecruiters-wp-job-importer.git
  2. Upload to wp-content/plugins/.
  3. Activate via Plugins in WordPress.
  4. Configure under Jobs > Settings:
    • API Endpoint:
      Example → https://api.smartrecruiters.com/v1/companies/{company}/postings
    • Select update frequency.
    • Optionally enable Delete Missing Jobs.
    • (Optional) Select departments to import.
  5. Click Import Now or wait for cron.

✅ Elementor Integration

  • Create a Single Template for SR Jobs:
    • Job Description → post_content
    • Contract Type → contract_type
    • Employment Type → rythme
    • Location → location
    • Department → department
    • Apply button → apply_url
  • Use Elementor’s Archive Template for job listing.

✅ Without Elementor (Fallback)

  • Use built-in templates:
    • archive-sr_job.php → Job list with JS filter by department.
    • single-sr_job.php → Full job view with Apply button and video embeds.

⚠️ Requirements

  • WordPress 6.x+
  • PHP 7.4+ (tested up to PHP 8.4)
  • SmartRecruiters API Key / Public Endpoint

🛠 Developer Notes

  • Stores all SmartRecruiters fields in custom meta for advanced customization.
  • Uses wp_kses with iframe whitelist to allow YouTube embeds.
  • Compatible with Elementor Dynamic Tags for custom fields.
  • Jobs update automatically if existing (_srji_ref meta key).
  • Option to remove jobs not present in the API (safe cleanup).

✅ Recent Changes

  • Added video support from jobAd.sections.videos (YouTube embeds + fallback link).
  • Whitelisted `

Releases

2 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v.1.0.1 latest
Dec 1, 2025 11mo ago
tag only
—
Aug 5, 2025 1 year ago
smartrecruiters-wp-job-importer-v1.0.0.zip
8

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

D+ grade

Security

SmartRecruiters Job Importer 1.0.0 · audited by WP Registry

High-severity findings.

1 high 2 medium
Audited release
1.0.0
Findings
3
Worst severity
high
Content hash
01966404ed27d3cf4df43d0a…

Findings

  • high Manual import admin-post lacks capability and nonce checks

    missing_capability

    admin_post_srji_manual_import calls fetch_jobs() with no current_user_can() and no nonce. The settings form posts to admin-post.php without a nonce field. Any authenticated user (Subscriber+) can create/delete sr_job posts based on the configured API and optional delete_missing behavior.

    includes/class-importer.php:9-17

  • medium AJAX department refresh verifies nonce but not capability

    missing_capability

    wp_ajax_srji_refresh_departments only check_ajax_referer('srji_nonce'). admin_enqueue_scripts localizes that nonce on all admin pages (including profile for low-priv users). Any logged-in user with the nonce can wp_remote_get the configured api_url and update_option('srji_departments_list').

    admin/class-admin-ui.php:93-115

  • medium Importer fetches attacker-influenced job ref URLs (SSRF)

    ssrf

    fetch_jobs() wp_remote_get()s esc_url_raw($job['ref']) from the remote SmartRecruiters payload with no host allowlist. A compromised or malicious API endpoint (or poisoned posting) causes the site to request arbitrary URLs during cron/manual import.

    includes/class-importer.php:44-51

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.