CVE-2026-39775

Summary

This vulnerability allows subscribers to escalate their privileges, potentially gaining full control over the JobZilla - Job Board WordPress Theme <= 2.2 instances.

Exploitability

Exploitation requires the target to be running an affected version of the JobZilla theme, and the attacker to be a subscriber. The exploit is relatively straightforward given the privilege escalation nature.

Blast radius

If exploited, the impact could be severe, as it allows full control over the WordPress site, potentially leading to data theft, site compromise, or further attacks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to JobZilla version 2.3 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.