WP Job Portal WordPress Plugin SQL Injection Vulnerability in Versions Prior to 2.5.5

A SQL injection vulnerability has been identified in the WP Job Portal WordPress plugin, affecting versions prior to 2.5.5. The issue arises because the plugin fails to properly sanitize and escape a parameter before incorporating it into a SQL query. This flaw allows authenticated users with subscriber-level (self-registerable) accounts to execute SQL injection attacks.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate SQL queries to the database. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Remediation

Users are advised to update the WP Job Portal WordPress plugin to version 2.5.5 or later.