EUVD-2026-119820

The Grand Job WordPress plugin through 1.2.1 does not correctly verify the password reset code before updating a user's password, allowing unauthenticated attackers to set the password of arbitrary accounts, including administrators, and fully take over the site...

CVE-2026-115237

The Grand Job WordPress plugin (version 1.2.1 and below ) is vulnerable to an unauthenticated account takeover . The root cause is a failure to correctly verify the password reset code before updating a user's password. This flaw allows an attacker to set the password for arbitrary accounts , inc...