CVE-2026-100511
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Object Injection. This issue affects VK Google Job Posting Manager: from n/a through 1.3.1.
Risk Assessment
Object injection may allow an attacker to perform unauthorized actions or achieve remote code execution within the WordPress context.
Recommendation
Update the VK Google Job Posting Manager plugin to a version later than 1.3.1 or disable it if no update is available.
Other vulnerabilities in VK Google Job Posting Manager
Original NVD description (English source)
Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Object Injection.This issue affects VK Google Job Posting Manager: from n/a through 1.3.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS