Access Control Flaw in Automattic WP Job Manager by WordPress

CVE-2026-25404

What is CVE-2026-25404?

A security vulnerability exists in the WP Job Manager plugin, developed by Automattic, where inadequate authorization checks may permit unauthorized access to sensitive functionalities. This flaw arises from misconfigured access control security levels, making it possible for malicious actors to exploit the situation. Affected versions include all prior to and including 2.4.0. Proper mitigation measures should be taken to secure installations of the plugin.

References