CVE-2026-124416: WordPress WP Job Portal plugin <= 2.7.2 - Broken Access Control vulnerability
Published Nov 11, 2026
·Updated
Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through 2.7.2.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ahmad WP Job Portal (wp-job-portal)to a version that resolves this vulnerability.Fixed in 2.8.0
Event History
Nov 11, 2026
CVE Published
via MITRE·12:38 PM
Data Sourced
via MITRE·12:38 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attack vector requires network access and low privileges. No user interaction is required.
2
What is the potential impact if the vulnerability is exploited?
Successful exploitation can affect integrity, while no confidentiality or availability impact is indicated by the supplied CVSS vector.
3
Which plugin versions are affected?
WP Job Portal versions through 2.7.2 are affected. The earliest affected version is not specified.