CVE-2026-24379: WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through <= 2.4.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24379?
CVE-2026-24379 is considered a high severity vulnerability due to its potential for authorization bypass.
How do I fix CVE-2026-24379?
To fix CVE-2026-24379, you should update the WP Job Portal plugin to version 2.4.4 or later.
What type of vulnerability is CVE-2026-24379?
CVE-2026-24379 is classified as an Insecure Direct Object References (IDOR) vulnerability.
Who is affected by CVE-2026-24379?
Any WordPress site using the WP Job Portal plugin version 2.4.3 or earlier is affected by CVE-2026-24379.
What can attackers do with CVE-2026-24379?
Attackers can exploit CVE-2026-24379 to bypass access controls and gain unauthorized access to sensitive user information.