CVE-2026-4758 | wpjobportal WP Job Portal Plugin up to 2.4.9 on WordPress Path Validation removeFileCustom path traversal

March 26, 2026 Yanac

A vulnerability classified as critical has been found in wpjobportal WP Job Portal Plugin up to 2.4.9 on WordPress. The affected element is the function WPJOBPORTALcustomfields::removeFileCustom of the component Path Validation Handler. The manipulation leads to path traversal.

This vulnerability is listed as CVE-2026-4758. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More