CVE-2026-12396

The WP Job Portal WordPress plugin, in versions prior to 2.5.5 , is vulnerable to unauthorized actions due to a lack of capability or ownership checks . This flaw allows authenticated users with a subscriber-level (self-registerable) account to perform job moderation actions, such as approving, f...