5.4
Moyenne
CVE-2026-12396 The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job…
Description
The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to approve, feature, or reject arbitrary jobs, including those owned by other users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Job Portal 2.5 | premières → < 2.5.5 | 2.5.5 |
Autres CVE de WP Job Portal
Les 4 CVE de WP Job Portal →
CVE-2026-12395
The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in…
6.5
Moyenne
CVE-2026-12397
The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email…
4.3
Moyenne
CVE-2023-4490
The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL…
9.8
Critique