WP Job Portal – A Complete Job Board, CVE-2026-12396
- CVE, Research URL
- Application
- Published on
- Jul 13, 2026
- Research Description
- The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to approve, feature, or reject arbitrary jobs, including those owned by other users.
- Affected versions
-
max 2.5.5.
- Status
-
vulnerable