Path traversal in wpjobportal WP Job Portal – AI-Powered Recruitment System for Company…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-862.
Summary
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusion, Arbitrary Settings Update, and User Creation in all versions up to, and including, 2.1.6 via several functions called by the 'checkFormRequest' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Attackers can also update arbitrary settings and create user accounts even when registration is disabled, leading to user creation with a default role of Administrator.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| wpjobportal | WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | up to 2.1.6 | — | No fix listed | CNA |
- WP Job Portal – AI-Powered Recruitment System for Company or Job Board website Vendorwpjobportal Affected up to 2.1.6 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:wpjobportal:wp_job_portal:*:*:*:*:*:wordpress:*:* | before 2.1.7 | Vulnerable | wpjobportal |
- cpe:2.3:a:wpjobportal:wp_job_portal:*:*:*:*:*:wordpress:*:* Versions before 2.1.7 Vulnerable ·wpjobportal
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-7950
- 2026-10-03 Alias added: GHSA-pf98-xx8j-74qh
References
Other 6
- https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/includes/formhandler.php
- https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/includes/includer.php
- https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/includes/wpjobportal-hooks.php
- https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/modules/configuration/controller.php
- https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/modules/user/controller.php
- https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.1.5/modules/user/tmpl/views/frontend/form-field.php
More wpjobportal Wp Job Portal vulnerabilities
- TI-2023-04143 WP Job Portal < 2.0.6 - Unauthenticated SQLi CVSS 3.1CRITICAL 9.8
- TI-2025-30600 WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability CVSS 3.1CRITICAL 9.3
- TI-2025-29935 WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability CVSS 3.1CRITICAL 9.8
- TI-2022-20161 WordPress WP Job Portal Plugin <= 2.0.1 is vulnerable to Broken Access Control CVSS 3.1CRITICAL 9.8
- TI-2024-10861 WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation CVSS 3.1CRITICAL 9.8
- TI-2025-19806 WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability CVSS 3.1HIGH 8.8
Sources
- CVE-2024-7950 · CVE Program
- CVE-2024-7950 · NVD
- FIRST EPSS
- GHSA-pf98-xx8j-74qh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences