PT-2026-27928 · WordPress · Eyecix Addon Jobsearch Chat+1

CVE-2026-25377 · Publicado 2026-03-25 · Atualizado 2026-04-07

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions eyecix Addon Jobsearch Chat versions n/a through 3.0

Description The eyecix Addon Jobsearch Chat addon contains a flaw due to improper neutralization of special elements used in an SQL command, leading to a SQL injection issue. This allows for SQL injection attacks. The addon-jobsearch-chat component is affected.

Recommendations Versions prior to 3.0 should be updated.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-25377

Produtos afetados

Addon Jobsearch Chat

Eyecix Addon Jobsearch Chat

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-25377 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/addon-jobsearch-chat/vulnerability/wordpress-addon-jobsearch-chat-plugin-3-0-sql-injection-vulnerability?_s_id=cve · Nota
• https://twitter.com/atomicedgeWAF/status/2041478608271671788 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2038516993050193970 · Publicação no Twitter