CVE-2025-26935

Summary

CVE-2025-26935 is a newly discovered path traversal vulnerability that puts WP Job Portal, versions 1 through 2.2.8, at risk. Hackers can exploit this issue to perform PHP Local File Inclusion, gaining unauthorized access to sensitive files. This vulnerability could potentially be used for data theft, server takeover, or other malicious activities. It is crucial that users of the WP Job Portal plugin update to the latest version as soon as possible to mitigate this risk. Failure to do so may leave systems open to attack.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.