Medium · 5.4 CVE-2023-52212 EUVD-2023-56885GHSA-x984-f4vj-r499

WordPress WP Job Manager plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Jan 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Automattic Product: WP Job Manager

Description

Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager allows Cross Site Request Forgery.This issue affects WP Job Manager: from n/a through 2.0.0.

Affected products

Vendor	Product	Affected	Fixed
Automattic	WP Job Manager	≤ 2.0.0	—

References

https://vdp.patchstack.com/database/wordpress/plugin/wp-job-manager/vulnerability/wordpress-wp-job-manager-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry