EUVD-2026-44872
GHSA-rvr6-j86x-jv23
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Network-exploitable via subscriber account (PR:L, AV:N); read-only injection yields full database confidentiality loss but no integrity or availability impact.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
5DescriptionCVE.org
The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-level (self-registerable) account to perform SQL injection attacks.
AnalysisAI
SQL injection in WP Job Portal WordPress plugin before 2.5.5 enables authenticated subscriber-level users to exfiltrate data from the underlying WordPress database. Because subscriber accounts are explicitly self-registerable (no admin approval required), the practical authentication barrier is near-zero for any external attacker. A publicly available exploit exists per WPScan, though EPSS at 0.18% (7th percentile) indicates limited observed exploitation to date and no CISA KEV listing at time of analysis.
Technical ContextAI
WP Job Portal is a WordPress plugin that adds job-board functionality to WordPress sites. CWE-89 (SQL Injection) identifies the root cause as unsanitized user-controlled input being concatenated directly into a SQL query without parameterization or prepared statements. The CVSS confidentiality-only impact (C:H/I:N/A:N) is consistent with a read-oriented injection class - likely UNION-based or blind extraction - rather than a stacked-query write primitive. The CPE string (cpe:2.3:a:unknown:wp_job_portal:*:*:*:*:*:*:*:*) lists the vendor as 'unknown' in NVD, so product attribution is drawn from the WPScan report and EUVD entry rather than an authoritative CPE vendor match.
RemediationAI
Upgrade WP Job Portal to version 2.5.5 or later, which is the vendor-released patch per WPScan (https://wpscan.com/vulnerability/0183c669-cb09-4d53-852f-a0a877691d1e/) and EUVD-2026-44872. If immediate upgrade is not feasible, disable WordPress open user registration (Settings > General > uncheck 'Anyone can register') to eliminate the self-registration vector and prevent external attackers from obtaining the subscriber account needed to exploit this flaw - note this will also block legitimate new user sign-ups, which may impact site functionality. A Web Application Firewall rule targeting SQL injection patterns in the plugin's known parameter could provide additional detection coverage but should not substitute for patching, as bypass is plausible against rule-based filters.
More in Wp Job Portal
View allThe WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statem
The WP Job Portal - A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to
The WP Job Portal - A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to
Missing authorization in WP Job Portal WordPress plugin before 2.5.5 allows any self-registered subscriber to approve, f
A SQL injection vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection (CVSS 9.3). Critical severity with
Blind SQL injection in the WP Job Portal WordPress plugin (versions up to and including 2.5.1) allows remote unauthentic
SQL injection in the WP Job Portal WordPress plugin (versions up to and including 2.5.6) is exploitable by any authentic
Information disclosure in the WP Job Portal WordPress plugin before version 2.5.5 allows any authenticated subscriber-le
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Porta
Path Traversal vulnerability in wpjobportal WP Job Portal allows PHP Local File Inclusion.2.8. Rated high severity (CVSS
The WP Job Portal - A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today