Veille CVE

Recherche « Unknown WP Job Portal »

3 CVE

Critique 0 Élevée 0 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown WP Job Portal » ✕
  1. CVE-2026-12395 6.5 Moyenne

    Unknown WP Job Portal

    The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-level (self-registerable) account to perform SQL injection attacks.

  2. CVE-2026-12397 4.3 Moyenne

    Unknown WP Job Portal

    The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level (self-registerable) account to read other employers' private account email addresses by enumerating job identifiers.

  3. CVE-2026-12396 5.4 Moyenne

    Unknown WP Job Portal

    The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to approve, feature, or reject arbitrary jobs, including those owned by other users.