Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: WP Job Portal 2.5.5 Clear all filters
TI-2026-10644 CVE-2026-12397 · GHSA-9j4j-jqwp-qxc9

WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR

Priority MEDIUM 53

The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level (self-registerable) account to re…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0027 Published 2026-07-13 Fixed in 2.5.5
TI-2026-10643 CVE-2026-12396 · GHSA-xxgv-vhqj-mqwq

WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection

Priority MEDIUM 58

The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00287 Published 2026-07-13 Fixed in 2.5.5