{"id":"CVE-2026-39775","published":"2026-10-06T09:17:50.200","lastModified":"2026-10-06T15:04:25.990","description":"Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-266"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/theme/jobzilla/vulnerability/wordpress-jobzilla-job-board-wordpress-theme-theme-2-2-privilege-escalation-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows subscribers to escalate their privileges, potentially gaining full control over the JobZilla - Job Board WordPress Theme <= 2.2 instances.","exploitability":"Exploitation requires the target to be running an affected version of the JobZilla theme, and the attacker to be a subscriber. The exploit is relatively straightforward given the privilege escalation nature.","blast_radius":"If exploited, the impact could be severe, as it allows full control over the WordPress site, potentially leading to data theft, site compromise, or further attacks.","remediation":"Upgrade to JobZilla version 2.3 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","wordpress","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:44:20.297Z"}}