PT-2026-27928 · WordPress · Eyecix Addon Jobsearch Chat+1

Published 2026-03-25 · Updated 2026-04-07 · CVE-2026-25377

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions eyecix Addon Jobsearch Chat versions n/a through 3.0

Description The eyecix Addon Jobsearch Chat addon contains a flaw due to improper neutralization of special elements used in an SQL command, leading to a SQL injection issue. This allows for SQL injection attacks. The addon-jobsearch-chat component is affected.

Recommendations Versions prior to 3.0 should be updated.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-25377

Affected Products

Addon Jobsearch Chat

Eyecix Addon Jobsearch Chat

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-25377 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/addon-jobsearch-chat/vulnerability/wordpress-addon-jobsearch-chat-plugin-3-0-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/atomicedgeWAF/status/2041478608271671788 · Twitter Post
• https://twitter.com/CVEnew/status/2038516993050193970 · Twitter Post