CVE-2026-39752

HighCVSS 7.7

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

A vulnerability in the Jobs plugin for WordPress up to version 2.8.2 allows a user with the Contributor role to delete arbitrary files.

An attacker with contributor privileges can delete arbitrary files on the server, potentially leading to data loss or disruption of the website.

Update the Jobs plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS