CVE-2025-47438: WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through <= 2.3.1.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47438?
CVE-2025-47438 is classified as a critical vulnerability that allows for local file inclusion in vulnerable versions of WP Job Portal.
How do I fix CVE-2025-47438?
To mitigate CVE-2025-47438, you should update your WP Job Portal plugin to version 2.3.2 or later.
What versions of WP Job Portal are affected by CVE-2025-47438?
CVE-2025-47438 affects WP Job Portal versions up to and including 2.3.1.
What is the impact of CVE-2025-47438?
Exploitation of CVE-2025-47438 can lead to unauthorized access to sensitive files on the server.
Is there a workaround for CVE-2025-47438 before applying the patch?
Until the update is applied, it is recommended to disable the WP Job Portal plugin or restrict access to it to prevent exploitation of CVE-2025-47438.