CVE-2026-81299: Ahmad WP Job Portal, заобикаляне на вход и права

Описание

Оригинално описание

Subscriber Insecure Direct Object References (IDOR) in WP Job Portal <= 2.5.9 versions.

Засегнати продукти

• Ahmad WP Job Portal: n/a до 2.5.9

Вид слабост

• CWE-639 Authorization Bypass Through User-Controlled Key

История

Други уязвимости в Ahmad WP Job Portal

• 4.3CVE-2026-22386
• 6.5CVE-2026-48880
• 7.1CVE-2026-42685
• 9.3CVE-2026-42684

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-81299
• https://nvd.nist.gov/vuln/detail/CVE-2026-81299
• https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-5-9-insecure-direct-object-references-idor-vulnerability?_s_id=cve