Skip to content
Sign in
7.5 High

CVE-2025-52806 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in eyecix JobSearch wp-jobsearch allows PHP Local File Inclusion.This issue affects JobSearch: from n/a through < 3.0.8.

Affected products and versions

Product Affected versions Fixed in
JobSearch 3.0 earliest → 3.0.8 No fix stated

Other CVEs of JobSearch

The 15 CVEs of JobSearch →
CVE-2026-84834 Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions 9.8 Critical CVE-2026-57383 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch… 7.1 High CVE-2026-54186 Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions 9.3 Critical CVE-2026-32493 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch… 7.1 High
Track this CVE