CVE-2026-65569 is an SQL Injection vulnerability (CWE-89) in WP Job Portal affecting versions up to 2.5.6. The flaw arises from improper neutralization of special elements used in SQL commands within the Subscriber component, enabling an attacker with low privileges and no user interaction to execute unauthorized SQL queries. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with network attack vector, low attack complexity, and scope change. Confidentiality impact is high, integrity impact is none, and availability impact is low. There is no vendor advisory or patch available at this time.

An attacker with low privileges can exploit this SQL Injection vulnerability to execute arbitrary SQL commands, potentially leading to disclosure of sensitive data (high confidentiality impact) and limited disruption of service (low availability impact). Integrity is not impacted according to the CVSS vector. The vulnerability affects the security posture of the WP Job Portal installation by exposing database contents to unauthorized access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the Subscriber functionality and applying web application firewall rules to detect and block SQL injection attempts targeting this component.