What is the CVSS score of CVE-2025-48274?

CVE-2025-48274 has a CVSS 3.1 base score of 9.3 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L. EPSS exploitation probability: 0.1%.

How to fix or mitigate CVE-2025-48274?

Within 24 hours: Audit all WP Job Portal installations and document affected versions; implement Web Application Firewall (WAF) rules to block SQL injection patterns; disable public-facing job portal features if business-critical. Within 7 days: Apply network segmentation to isolate affected WordPress instances; enable database activity monitoring; conduct forensic review for evidence of exploitation. Within 30 days: Either upgrade to a patched version when released, or migrate to an alternative job portal solution; perform full database integrity audit.

CVE-2025-48274

EUVD-2025-18535 CRITICAL

SQL Injection (CWE-89)

2025-06-17 audit@patchstack.com

SQLi

9.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:42 vuln.today

cvss_changed

Severity Changed

Apr 23, 2026 - 15:42 NVD

HIGH CRITICAL

CVSS changed

Apr 23, 2026 - 15:42 NVD

7.5 (HIGH) 9.3 (CRITICAL)

EUVD ID Assigned

Mar 14, 2026 - 22:15 euvd

EUVD-2025-18535

Analysis Generated

Mar 14, 2026 - 22:15 vuln.today

CVE Published

Jun 17, 2025 - 15:15 nvd

HIGH 7.5

DescriptionCVE.org

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.3.2.

AnalysisAI

A SQL injection vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection (CVSS 9.3). Critical severity with potential for significant impact on affected systems.

Technical ContextAI

CWE-89 (SQL Injection). CVSS 9.3 indicates critical severity with likely remote exploitation vector. Affects wpjobportal WP Job Portal allows Blind SQL Injection.