CVE-2026-65569

Name of the Vulnerable Software and Affected Versions WP Job Portal versions prior to 2.5.7

Description An issue exists in the WP Job Portal plugin for WordPress due to insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. This allows authenticated attackers with subscriber-level access or higher to perform SQL Injection, which is a technique used to manipulate database queries. By appending additional SQL queries, an attacker can extract sensitive information from the database.

Recommendations Update the plugin to a version newer than 2.5.6.