CVE-2026-65569 is an SQL Injection vulnerability (CWE-89) in WP Job Portal versions <= 2.5.6. It arises from improper neutralization of special elements used in SQL commands within the Subscriber feature. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact is high on confidentiality, no impact on integrity, and low on availability. No known exploits are reported in the wild, and no official patch or remediation level has been published by the vendor or Patchstack as of the publication date.

The vulnerability allows an attacker with low privileges to perform SQL Injection attacks remotely without user interaction. This can lead to unauthorized disclosure of sensitive information (high confidentiality impact). There is no direct impact on data integrity, and availability impact is low. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is published, users should monitor vendor channels for updates. Until a patch is available, restricting access to the affected functionality and applying web application firewall rules to detect and block SQL Injection attempts may help mitigate risk.