https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T08:27:06.276987+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12397 CVE-2026-12397 — WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR 2026-10-13T08:27:06.278214+00:00

Affected: Unknown WP Job Portal

The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level (self-registerable) account to read other employers' private account email addresses by enumerating job identifiers.