CVE-2026-4306

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4306", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-03-16T20:57:12.096Z", "datePublished": "2026-03-23T22:25:40.158Z", "dateUpdated": "2026-04-08T17:31:26.081Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:31:26.081Z"}, "affected": [{"vendor": "wpjobportal", "product": "WP Job Portal \u2013 AI-Powered Recruitment System for Company or Job Board website", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.4.8", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The WP Job Portal plugin for WordPress is vulnerable to SQL Injection via the 'radius' parameter in all versions up to, and including, 2.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "title": "WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ecc34552-c9b0-455f-b1c7-b31cc847cb22?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.4.7/modules/job/model.php#L2743"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.4.7/includes/ajax.php#L10"}, {"url": "https://plugins.trac.wordpress.org/changeset?old_path=/wp-job-portal/tags/2.4.8&new_path=/wp-job-portal/tags/2.4.9"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "cweId": "CWE-89", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Leonid Semenenko"}], "timeline": [{"time": "2026-03-16T21:12:24.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2026-03-23T10:12:47.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-24T14:16:19.039564Z", "id": "CVE-2026-4306", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-24T15:13:00.978Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4306", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-24T14:16:19.039564Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-24T14:16:24.755Z"}}], "cna": {"title": "WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter", "credits": [{"lang": "en", "type": "finder", "value": "Leonid Semenenko"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "wpjobportal", "product": "WP Job Portal \u2013 AI-Powered Recruitment System for Company or Job Board website", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "2.4.8"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-03-16T21:12:24.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2026-03-23T10:12:47.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ecc34552-c9b0-455f-b1c7-b31cc847cb22?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.4.7/modules/job/model.php#L2743"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.4.7/includes/ajax.php#L10"}, {"url": "https://plugins.trac.wordpress.org/changeset?old_path=/wp-job-portal/tags/2.4.8&new_path=/wp-job-portal/tags/2.4.9"}], "descriptions": [{"lang": "en", "value": "The WP Job Portal plugin for WordPress is vulnerable to SQL Injection via the 'radius' parameter in all versions up to, and including, 2.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-03-23T22:25:40.158Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4306", "state": "PUBLISHED", "dateUpdated": "2026-03-24T15:13:00.978Z", "dateReserved": "2026-03-16T20:57:12.096Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-03-23T22:25:40.158Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "WP Job Portal \u2013 AI-Powered Recruitment System for Company or Job Board website", "vendor": "wpjobportal", "versions": [{"lessThanOrEqual": "2.4.8", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WP Job Portal plugin for WordPress is vulnerable to SQL Injection via the 'radius' parameter in all versions up to, and including, 2.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}, {"lang": "es", "value": "El plugin WP Job Portal para WordPress es vulnerable a una inyecci\u00f3n SQL a trav\u00e9s del par\u00e1metro 'radius' en todas las versiones hasta la 2.4.8, incluida esta, debido a un escape insuficiente del par\u00e1metro proporcionado por el usuario y a una preparaci\u00f3n insuficiente de la consulta SQL existente. Esto permite que atacantes no autenticados a\u00f1adan consultas SQL adicionales a consultas ya existentes, lo que puede utilizarse para extraer informaci\u00f3n confidencial de la base de datos."}], "id": "CVE-2026-4306", "lastModified": "2026-06-17T10:56:23.703", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-4306", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-24T14:16:19.039564Z", "version": "2.0.3"}}]}, "published": "2026-03-23T23:17:13.403", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.4.7/includes/ajax.php#L10"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.4.7/modules/job/model.php#L2743"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?old_path=/wp-job-portal/tags/2.4.8&new_path=/wp-job-portal/tags/2.4.9"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ecc34552-c9b0-455f-b1c7-b31cc847cb22?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.0.0,2.4.8]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WP Job Portal \u2013 AI-Powered Recruitment System for Company or Job Board website", "source": "cna", "vendor": "wpjobportal"}, "product": "wp_job_portal_\u2013_ai-powered_recruitment_system_for_company_or_job_board_website", "vendor": "wpjobportal"}], "analysis": {"en": {"generated_at": "2026-03-24T03:55:41.638871+00:00", "value": {"mitigation_remediation": ["Apply the latest version of WP Job Portal, at least 2.4.9, which removes the unsafe 'radius' handling.", "If an update cannot be performed immediately, disable or uninstall the WP Job Portal plugin until a patch is applied.", "As a temporary defensive measure, validate or sanitize the 'radius' parameter on the server side so that only numeric values are accepted, or use parameterized queries if possible.", "Continue to monitor your WordPress logs for anomalous SQL queries or failed database access attempts, and keep all plugins and core WordPress installations up to date."], "summary": {"action": "Immediate Patch", "impact": "SQL Injection leading to unauthorized data exfiltration"}, "threat_synthesis": {"affected_systems": "The flaw affects all installations of the WP Job Portal plugin with version numbers 2.4.8 or earlier. The plugin is a WordPress add\u2011on that powers recruitment sites. Any WordPress site that has the plugin version 2.4.8 or older is at risk, regardless of the WordPress core version.", "description_and_impact": "The WP Job Portal plugin for WordPress contains a parameter\u2011level SQL injection flaw in the 'radius' variable. Because the value is used directly in a database query without proper escaping or prepared statements, an attacker can inject arbitrary SQL commands. This allows unauthenticated users to retrieve sensitive data from the database, compromising confidentiality. The vulnerability is classified as CWE\u201189 and scores a CVSS of 7.5, indicating a high severity. No evidence that it is currently listed in CISA\u2019s KEV catalog, but the lack of authentication checks makes exploitation straightforward.", "risk_and_exploitability": "The CVSS score of 7.5 signifies a serious threat, and while EPSS data is unavailable, the unauthenticated nature of the flaw means an attacker can construct a malicious HTTP request containing a crafted 'radius' parameter and cause the database server to execute unintended statements. If exploited, the attacker could read or dump the entire database. The vulnerability is not currently known to be exploited in the wild, but its high severity and ease of exploitation warrant urgent attention."}}}}, "created": "2026-03-24T10:30:06.135713+00:00", "updated": "2026-03-25T20:36:13.713335+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress", "wpjobportal", "wpjobportal$PRODUCT$wp_job_portal_\u2013_ai-powered_recruitment_system_for_company_or_job_board_website"]}