---
id: "CVE-2026-124417"
page: "https://infrastack.ai/live/CVE-2026-124417"
kind: "vulnerability"
aliases: ["CVE-2026-124417"]
title: "WP Job Portal WordPress plugin: missing authorization check exposes access controls"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["package", "wordpress", "wp-job-portal"]
not_affected_if: ["plugin-not-installed"]
published_at: "2026-11-11T13:17:19+00:00"
first_seen_at: "2026-11-11T13:27:12+00:00"
updated_at: "2026-11-11T13:29:48+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124417", "first_seen_at": "2026-11-11T13:27:12+00:00"}]
exploit_sources: []
---

# WP Job Portal WordPress plugin: missing authorization check exposes access controls

Link for people: https://infrastack.ai/live/CVE-2026-124417 (this .md is for agents)

The WP Job Portal WordPress plugin has a missing authorization check, which the advisory describes as incorrectly configured access control levels. The sources say versions through 2.7.2 are affected, and an attacker may be able to reach actions they should not.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of the WP Job Portal plugin in the WordPress admin under Plugins, or in the plugin's main file header.
- Compare the version against `2.7.2`; the sources say versions through `2.7.2` are affected.

## Timeline

- 2026-11-11T13:27:12+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124417

## From the sources

Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through 2.7.2.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_