CVE-2026-57336

The Jobify plugin version 4.3.2 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.

The risk involves the execution of arbitrary JavaScript in the victim's browser, potentially leading to session theft, redirects to malicious sites, or theft of sensitive data.

Immediately update the Jobify plugin to a version newer than 4.3.2. If no update is available, temporarily disable the plugin.