High · 7.1 CVE-2026-42685 EUVD-2026-33910GHSA-w29x-75gh-2g79

WordPress WP Job Portal plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability

Published Jun 2, 2026 · Updated Jun 2, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal allows Reflected XSS.

This issue affects WP Job Portal: from n/a through 2.5.1.

Vendor	Product	Affected	Fixed
Ahmad	WP Job Portal	≤ 2.5.1	—