Authorization Bypass in WP Job Portal Plugin by WordPress

CVE-2026-24379

What is CVE-2026-24379?

The WP Job Portal plugin for WordPress is vulnerable to an authorization bypass due to incorrectly configured access control security levels. This flaw allows attackers to exploit user-controlled keys, potentially gaining unauthorized access to restricted features and sensitive information. Affected versions include WP Job Portal up to and including 2.4.3. Website administrators are encouraged to review their security settings and update to the latest version to mitigate potential risks.

References