CVE-2025-49975: WordPress JobWP plugin <= 2.4.0 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP allows Cross Site Request Forgery. This issue affects JobWP: from n/a through 2.4.0.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through <= 2.4.0.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49975?
CVE-2025-49975 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
Which versions of JobWP are affected by CVE-2025-49975?
CVE-2025-49975 affects JobWP versions up to and including 2.4.0.
How do I fix CVE-2025-49975?
To fix CVE-2025-49975, upgrade to a version of JobWP that is higher than 2.4.0.
What impact does CVE-2025-49975 have on my website?
CVE-2025-49975 can allow an attacker to perform actions on behalf of a user without their consent.
Is there a known exploit for CVE-2025-49975?
As of now, there are no public exploits reported for CVE-2025-49975, but it remains a significant security risk.