The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable sites. Please note that this may have been patched sooner, however, the oldest available version for us to confirm this is patched in was 1.2.85.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Job Board Plugin | — | Update wp-job-board plugin to version 2.3.16, or a newer patched version | Oct 21, 2025 | Feb 11, 2025 |
| Wp Job Board Pro Plugin | — | Update wp-job-board-pro plugin to version 1.2.85, or a newer patched version | Jan 15, 2026 | Feb 11, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub