CVE-2025-69318: WordPress JobWP plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak JobWP jobwp allows Stored XSS.This issue affects JobWP: from n/a through <= 2.4.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69318?
CVE-2025-69318 has been classified as a critical severity vulnerability due to its potential for stored cross-site scripting (XSS) which can compromise user data.
How do I fix CVE-2025-69318?
To fix CVE-2025-69318, update the JobWP plugin to version 2.4.6 or later, which addresses the XSS vulnerability.
Who is affected by CVE-2025-69318?
CVE-2025-69318 affects users of the JobWP plugin from version any version to 2.4.5.
What could happen if CVE-2025-69318 is exploited?
If CVE-2025-69318 is exploited, attackers can execute malicious scripts in the context of users' browsers, potentially leading to data theft or other malicious activities.
How can I tell if my installation is vulnerable to CVE-2025-69318?
You can determine if your installation is vulnerable to CVE-2025-69318 by checking if you are running JobWP plugin version 2.4.5 or older.