CVE-2026-42684
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal from n/a through 2.5.1.
Risk Assessment
The risk includes reading, modifying, or deleting data from the WordPress database, which could lead to data confidentiality and integrity breaches.
Recommendation
Update the WP Job Portal plugin to a version later than 2.5.1 that contains the fix, and use prepared statements to prevent SQL injection.
Original NVD description (English source)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.5.1.