WP Job Portal – A Complete Job Board, CVE-2026-12395
- CVE, Research URL
- Application
- Published on
- Jul 16, 2026
- Research Description
- The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-level (self-registerable) account to perform SQL injection attacks.
- Affected versions
-
max 2.5.5.
- Status
-
vulnerable