CVE-2026-81299
Deferred Deferred - Pending Action

Subscriber IDOR in WP Job Portal <= 2.5.9

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: Patchstack

Description
Subscriber Insecure Direct Object References (IDOR) in WP Job Portal <= 2.5.9 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-08-29
AI Q&A
2026-08-28
EPSS Evaluated
N/A
NVD
CVE-2026-81299
EUVD
EUVD-2026-67729

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wp_job_portal wp_job_portal to 2.5.9 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Subscriber Insecure Direct Object References (IDOR) issue found in WP Job Portal versions 2.5.9 and below. IDOR occurs when an application exposes direct references to internal objects, allowing unauthorized users to access or manipulate data by changing these references.

Impact Analysis

An attacker with subscriber-level access could exploit this to view or modify sensitive job portal data, such as job listings or user information, without proper authorization. This could lead to data leaks or unauthorized changes.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, violating GDPR and HIPAA requirements for data protection and access controls. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Update WP Job Portal to the latest version beyond 2.5.9 to address the Subscriber IDOR vulnerability. Disable or restrict subscriber access if not required. Review and audit user permissions regularly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81299. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart