What is the CVSS score of CVE-2025-48274?

CVE-2025-48274 has a CVSS 3.1 base score of 9.3 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L. EPSS exploitation probability: 0.1%.

Which versions of Wp Job Portal are affected by CVE-2025-48274?

A critical SQL injection vulnerability in WP Job Portal (versions through 2.3.2) allows unauthenticated attackers to extract sensitive database information, potentially exposing candidate data,…

How to fix or mitigate CVE-2025-48274?

Within 24 hours: Audit all WP Job Portal installations and document affected versions; implement Web Application Firewall (WAF) rules to block SQL injection patterns; disable public-facing job portal features if business-critical. Within 7 days: Apply network segmentation to isolate affected WordPress instances; enable database activity monitoring; conduct forensic review for evidence of exploitation. Within 30 days: Either upgrade to a patched version when released, or migrate to an alternative job portal solution; perform full database integrity audit.

Wp Job Portal CVE-2025-48274

EUVD-2025-18535 CRITICAL

SQL Injection (CWE-89)

2025-06-17 audit@patchstack.com

WordPress SQLi Wp Job Portal Wordpress Plugin Wpjobportal

9.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:42 vuln.today

cvss_changed

Severity Changed

Apr 23, 2026 - 15:42 NVD

HIGH CRITICAL

CVSS changed

Apr 23, 2026 - 15:42 NVD

7.5 (HIGH) 9.3 (CRITICAL)

EUVD ID Assigned

Mar 14, 2026 - 22:15 euvd

EUVD-2025-18535

Analysis Generated

Mar 14, 2026 - 22:15 vuln.today

CVE Published

Jun 17, 2025 - 15:15 nvd

HIGH 7.5

DescriptionCVE.org

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.3.2.

AnalysisAI

A SQL injection vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection (CVSS 9.3). Critical severity with potential for significant impact on affected systems.

Technical ContextAI

CWE-89 (SQL Injection). CVSS 9.3 indicates critical severity with likely remote exploitation vector. Affects wpjobportal WP Job Portal allows Blind SQL Injection.