This vulnerability (CVE-2026-22340) is an SQL Injection issue classified under CWE-89 in the WPJobster product of Jobster Marketplace. It affects all versions up to 6.3.5, allowing unauthenticated attackers to inject SQL commands. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could allow an unauthenticated attacker to execute arbitrary SQL commands on the backend database, potentially exposing sensitive data (high confidentiality impact) and causing limited disruption to service availability (low availability impact). Integrity impact is not indicated. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider applying temporary mitigations such as disabling or restricting access to vulnerable endpoints if possible. Monitor vendor channels for updates and apply patches promptly once available.