PT-2026-57638 · WordPress · Wp Job Portal
CVE-2026-12396
·
Published
2026-07-13
·
Updated
2026-07-13
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
WP Job Portal versions prior to 2.5.5
Description
Insufficient capability and ownership checks during job moderation actions allow authenticated users with subscriber-level accounts to approve, feature, or reject arbitrary jobs, including those belonging to other users.
Recommendations
Update WP Job Portal to version 2.5.5 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Wp Job Portal