CVE-2025-47438

CRITICAL 9.8CVE-2025-47438 · Published 23/05/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
wp job portal wpjobportal	`< 2.3.2`	`2.3.2`

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through <= 2.3.1.

References

patchstack.com/database/Wordpress/Plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-3-1-local-file-inclusion-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free