PT-2026-49485 · WordPress · Wp Job Portal

CVE-2026-48880 · Published 2026-06-15 · Updated 2026-06-22

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WP Job Portal versions prior to 2.5.3

Description Cross Site Scripting (XSS) exists in the plugin, allowing users with the Subscriber role to execute malicious scripts in the browser of other users.

Recommendations Update to a version newer than 2.5.2.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-48880

Affected Products

Wp Job Portal

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-48880 · Security Note
• https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/atomicedgeWAF/status/2068941134009598032 · Twitter Post