CVE-2026-22386: WordPress WP Job Portal plugin <= 2.7.1 - Broken Access Control vulnerability

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

Q: What is the likely impact if exploitation succeeds?

The documented impact is limited disclosure of information. No integrity or availability impact is indicated by the CVSS vector.

Q: Which plugin versions are affected?

WP Job Portal versions through 2.7.1 are affected. The provided data does not identify a fixed version.

Published Oct 29, 2026

Updated

Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through 2.7.1.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Ahmad WP Job Portal (wp-job-portal) to a version that resolves this vulnerability.
Fixed in 2.7.2

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

What is the likely impact if exploitation succeeds?

The documented impact is limited disclosure of information. No integrity or availability impact is indicated by the CVSS vector.

Which plugin versions are affected?