PULSEUnderground Intel

LIVE34signals / 24h

FEED

ransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomqilin reclama a ALIZE (alize-sud.fr) · FR · Professional Servicesransomqilin reclama a Jakle & Alexander · US · Not Foundransomqilin reclama a Akuur Law Firm · TR · Professional Servicesransomqilin reclama a J&T Bank and Trust · US · Financial Servicesransombravox reclama a MITC AG · CH · Otherransomakira reclama a Basic Grain Products · Agriculture and Food Productionransomakira reclama a Pharma Test Apparatebau AG · CH · Manufacturingransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomqilin reclama a ALIZE (alize-sud.fr) · FR · Professional Servicesransomqilin reclama a Jakle & Alexander · US · Not Foundransomqilin reclama a Akuur Law Firm · TR · Professional Servicesransomqilin reclama a J&T Bank and Trust · US · Financial Servicesransombravox reclama a MITC AG · CH · Otherransomakira reclama a Basic Grain Products · Agriculture and Food Productionransomakira reclama a Pharma Test Apparatebau AG · CH · Manufacturing

CVE WatchAug 6, 2026

CVE-2026-65569

Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.

CVSS

8.5

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 6, 2026 · Last modified: Aug 6, 2026 · CWE-89

EPSS · 30d

Not enough EPSS history yet.

Technical description

Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-5-6-sql-injection-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-664479.3 CRI

———Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.6h CVE-2026-655478.5 HIG

———Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.6h CVE-2026-655469.3 CRI

———Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.7h CVE-2026-655209.3 CRI

———Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.6h CVE-2026-655089.3 CRI

———Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.6h CVE-2026-34191—

———Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.37h