CVE-2026-54186
CriticalCVSS 9.3Summary
In JobSearch versions up to 3.2.9, there is an unauthenticated SQL Injection vulnerability that can be exploited by an attacker to execute unauthorized queries against the database.
Risk Assessment
This vulnerability may lead to the exposure of sensitive data or data manipulation, posing a serious threat to the organization's security.
Recommendation
It is recommended to upgrade to the latest version of JobSearch to mitigate this vulnerability and conduct a security audit of the application.
Other vulnerabilities in JobSearch
See all- CVE-2026-84834Critical
Unauthenticated PHP Object Injection vulnerability in JobSearch versions up to 3.2.0. An attacker can inject malicious PHP objects, potentially leading to arbitrary code execution.
- CVE-2026-57383High
The JobSearch WordPress plugin (versions up to 3.2.9) contains a stored XSS vulnerability. Improper input neutralization during web page generation allows an attacker to inject a malicious script.
- CVE-2026-49057High
JobSearch versions up to 3.2.7 contain a vulnerability in access control that allows unauthorized access to resources.
Original NVD description (English source)
Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS