PT-2026-68558
CVE-2026-65569
·
تاريخ النشر
2026-08-06
·
تاريخ التحديث
2026-08-06
الوصف من
CVSS 3.1
8.5
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions
WP Job Portal versions prior to 2.5.7
Description
An issue exists in the WP Job Portal plugin for WordPress due to insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. This allows authenticated attackers with subscriber-level access or higher to perform SQL Injection, which is a technique used to manipulate database queries. By appending additional SQL queries, an attacker can extract sensitive information from the database.
Recommendations
Update the plugin to a version newer than 2.5.6.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾