OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-39752

HIGH · CVSS 7.7

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

The Jobs for WordPress plugin versions up to 2.8.2 are vulnerable to arbitrary file deletion, allowing authenticated users to delete arbitrary files on the server. This could lead to significant data loss or service disruption, making it critical for website administrators and security teams managing WordPress installations to prioritize patching or updating this plugin. Immediate action is recommended to mitigate potential exploitation risks.

CVE
CVE-2026-39752
Severity
HIGH
CVSS
7.7
EPSS
N/A
WordPress

Original NVD Description

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.