CVE-2026-124417: WordPress WP Job Portal plugin <= 2.7.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through 2.7.2.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ahmad WP Job Portal (wp-job-portal)to a version that resolves this vulnerability.Fixed in 2.8.0
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs network access and low-privileged access to the affected WordPress environment. No user interaction is required.
What is the likely impact if exploited?
The supplied severity vector indicates low confidentiality impact, with no integrity or availability impact. The issue involves incorrectly configured access-control security levels.
Which versions are affected?
WP Job Portal versions through 2.7.2 are affected. The available data does not identify a fixed version.