CVE-2026-49057
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
JobSearch versions up to 3.2.7 contain a vulnerability in access control that allows unauthorized access to resources.
Risk Assessment
Organizations may be exposed to unauthorized access to sensitive data, potentially leading to a loss of information confidentiality.
Recommendation
It is recommended to upgrade to the latest version of JobSearch to mitigate this security vulnerability.
Other vulnerabilities in JobSearch
See all- CVE-2026-54186Critical
In JobSearch versions up to 3.2.9, there is an unauthenticated SQL Injection vulnerability that can be exploited by an attacker to execute unauthorized queries against the database.
- CVE-2026-57383High
The JobSearch WordPress plugin (versions up to 3.2.9) contains a stored XSS vulnerability. Improper input neutralization during web page generation allows an attacker to inject a malicious script.
Original NVD description (English source)
Unauthenticated Broken Access Control in JobSearch <= 3.2.7 versions.