WP Job Portal – A Complete Job Board, CVE-2026-12397
- CVE, Research URL
- Application
- Published on
- Jul 13, 2026
- Research Description
- The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level (self-registerable) account to read other employers' private account email addresses by enumerating job identifiers.
- Affected versions
-
max 2.5.5.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| JSON API User (CVE-2026-9626) , Jul 04, 2026 |
| JSON API User (CVE-2024-6624) , Jul 12, 2024 |