CVE-2025-32265: WordPress JobWP plugin <= 2.3.9 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP allows Cross Site Request Forgery. This issue affects JobWP: from n/a through 2.3.9.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through <= 2.3.9.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32265?
CVE-2025-32265 is classified as a Cross-Site Request Forgery (CSRF) vulnerability, which poses significant risk to user session integrity.
How do I fix CVE-2025-32265?
To fix CVE-2025-32265, upgrade the JobWP plugin to the latest version beyond 2.3.9 where the vulnerability has been patched.
What systems are affected by CVE-2025-32265?
CVE-2025-32265 affects the JobWP plugin versions up to and including 2.3.9.
What types of attacks can CVE-2025-32265 enable?
CVE-2025-32265 can enable attackers to perform unauthorized actions on behalf of users without their consent.
Is there a workaround for CVE-2025-32265?
Currently, the only effective workaround for CVE-2025-32265 is to disable the JobWP plugin until it can be updated.