CVE-2025-57895: WordPress JobWP Plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP allows Cross Site Request Forgery. This issue affects JobWP: from n/a through 2.4.3.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through <= 2.4.3.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57895?
The severity of CVE-2025-57895 is classified as a high-risk Cross-Site Request Forgery vulnerability.
Who is affected by CVE-2025-57895?
CVE-2025-57895 affects users of Hossni Mubarak JobWP and WordPress JobWP Plugin versions up to 2.4.3.
How do I fix CVE-2025-57895?
To fix CVE-2025-57895, upgrade Hossni Mubarak JobWP or WordPress JobWP Plugin to a version that is later than 2.4.3.
What type of attack does CVE-2025-57895 allow?
CVE-2025-57895 allows attackers to exploit Cross-Site Request Forgery (CSRF) to perform unauthorized actions.
Is there a patch available for CVE-2025-57895?
Yes, a patch is available in versions of Hossni Mubarak JobWP and WordPress JobWP Plugin after 2.4.3.