Vulnerabilities / WP Job Portal – AI-Powered Recruitment System for Company or Job Board website / WPSEC-2026-1992
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.7.1 - Authenticated (Subscriber+) Missing Authorization to Sensitive Information Exposure via 'uid' Parameter
Medium 4.3
CWE-862Fixed in 2.7.2
- ID
- WPSEC-2026-1992
- Plugin
- WP Job Portal – AI-Powered Recruitment System for Company or Job Board website (wp-job-portal)
- Affected
- all versions before 2.7.2
- Remediation
- Update to 2.7.2 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-862
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-10-29
- Attack surface
- WP Job Portal – AI-Powered Recruitment System for Company or Job Board website on WPSec AttackSurface
- Fix released
- Published
Description
The WP Job Portal plugin for WordPress is vulnerable to unauthorized access of data via the getUserRoleBasedInfo AJAX task in all versions up to, and including, 2.7.1, due to a missing capability check. The handler only verified the 'wpjobportal_user_nonce' nonce, which is also printed on the front-end profile form shown to every logged-in portal user. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve other users' company names, resume titles or resume holders' names by changing the 'uid' parameter.
References
- https://wpsec.com/vuln/WPSEC-2026-1992/
- https://plugins.svn.wordpress.org/wp-job-portal/tags/2.7.2/
- https://wordpress.org/plugins/wp-job-portal/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS