CVE-2025-39536: WordPress JobHunt Job Alerts plugin <= 3.6 - Arbitrary Content Deletion Vulnerability
Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6.
Other sources
Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts jobhunt-notifications allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobHunt Job Alerts: from n/a through <= 3.6.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39536?
CVE-2025-39536 is classified as a moderate severity vulnerability due to missing authorization in Chimpstudio JobHunt Job Alerts.
How do I fix CVE-2025-39536?
To fix CVE-2025-39536, you should upgrade Chimpstudio JobHunt Job Alerts to the latest version beyond 3.6.
What versions of JobHunt Job Alerts are affected by CVE-2025-39536?
CVE-2025-39536 affects all versions of Chimpstudio JobHunt Job Alerts from n/a through 3.6.
What type of vulnerability is CVE-2025-39536?
CVE-2025-39536 is a missing authorization vulnerability that can lead to unauthorized access.
Who is impacted by CVE-2025-39536?
Users of Chimpstudio JobHunt Job Alerts version 3.6 and below are impacted by CVE-2025-39536.