Live › vulnerability › CVE-2026-22386
WP Job Portal, a WordPress job board plugin, has a missing authorization check that lets a user reach functions their role should not allow. The sources give a CVSS score of 4.3 (medium) and do not describe the exact data an attacker could read or change.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 13:25 UTC. All times on this page are UTC.
Sites running the WP Job Portal WordPress plugin at version 2.7.1 or earlier are in scope, according to the sources. The sources do not describe the specific configuration or role needed to reach the missing check. Sites that do not run this plugin can skip it.
No product ranges from the sources yet.
wp-content/plugins/wp-job-portal/.2.7.1 as affected, per the sources.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through 2.7.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-22386")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.