CVE-2026-12396 — WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection

CVE-2026-12396

WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection PUBLISHED

Description (CNA)

The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to approve, feature, or reject arbitrary jobs, including those owned by other users.

Affected (CNA)

Vendor / product	Versions
Unknown / WP Job Portal	affected 0 before 2.5.5

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/13d574ea-84fe-421b-b1e4-23f94e2000d7/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.