The WP Job Portal WordPress plugin versions prior to 2.5.5 do not properly sanitize and escape user-supplied input before incorporating it into SQL queries. This vulnerability enables authenticated users with subscriber-level privileges, which are self-registerable, to perform SQL injection attacks. No CVSS score or official remediation information is currently available.

An attacker with a subscriber-level account can exploit this vulnerability to execute arbitrary SQL commands on the database. This could lead to unauthorized data access, data modification, or other impacts depending on the database privileges of the application. There is no evidence of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions before 2.5.5, upgrading to version 2.5.5 or later (if available) is recommended once confirmed. Until an official fix is released, restrict subscriber-level user registrations if possible and monitor for suspicious activity related to SQL injection attempts.