CVE-2025-48274

CVE-2025-48274 is a Blind SQL Injection vulnerability affecting WP Job Portal versions up to and including 2.3.2. This flaw allows an unauthenticated attacker to execute arbitrary SQL commands, potentially leading to unauthorized data disclosure. With a CVSS score of 7.5 (High), it can be exploited remotely over the network with low attack complexity and no user interaction required, primarily impacting confidentiality. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.