CVE-2024-11711 is an SQL Injection vulnerability in the WP Job Portal plugin for WordPress, affecting all versions up to and including 2.2.1. The issue arises from insufficient escaping and lack of proper preparation of the 'resumeid' parameter in SQL queries. This allows unauthenticated attackers to append additional SQL commands, potentially extracting sensitive data from the backend database. The vulnerability is classified under CWE-89 and has a CVSS 3.1 base score of 7.5, indicating high severity. No patch or remediation details are currently available from the vendor, and the plugin is not a cloud service.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information from the database by injecting malicious SQL commands through the 'resumeid' parameter. The attacker does not require authentication, increasing the risk. There is no indication of impact on data integrity or availability. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling the vulnerable plugin or restricting access to the affected functionality to trusted users only. Monitor vendor channels for updates regarding patches or official mitigations.