CVE-2026-24941: WordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerability
Published Feb 20, 2026
·Updated
Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through <= 2.4.4.
Affected Software
1 affected component
wordpress/wp-job-portal<=2.4.4
Event History
Feb 20, 2026
CVE Published
via MITRE·03:47 PM
Data Sourced
via MITRE·03:47 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:22 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-24941?
CVE-2026-24941 is classified as a missing authorization vulnerability, potentially allowing unauthorized access.
2
How do I fix CVE-2026-24941?
To fix CVE-2026-24941, update the WP Job Portal plugin to the latest version beyond 2.4.4.
3
What versions of WP Job Portal are affected by CVE-2026-24941?
CVE-2026-24941 affects all versions of WP Job Portal from n/a through 2.4.4.
4
What kind of attack can CVE-2026-24941 enable?
CVE-2026-24941 can enable unauthorized users to exploit incorrectly configured access control security levels.
5
Is CVE-2026-24941 related to data exposure?
Yes, CVE-2026-24941 can lead to unauthorized access, potentially exposing sensitive data.