exploitDog

CVE-2025-48274

Опубликовано: 17 июн. 2025

Источник: nvd

CVSS3: 9.3

CVSS3: 7.5

EPSS Низкий

Описание

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.3.2.

Ссылки

https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-2-3-2-sql-injection-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wpjobportal:wp_job_portal:*:*:*:*:*:wordpress:*:*

Версия до 2.3.3 (исключая)

EPSS

Процентиль: 8%

0.00031

Низкий

9.3 Critical

CVSS3

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-x4mf-ppgr-9fg2

CVSS3: 9.3

github

8 месяцев назад

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.3.2.

EPSS

Процентиль: 8%

0.00031

Низкий

9.3 Critical

CVSS3

7.5 High

CVSS3

Дефекты

CWE-89