Blog

A look at CVE-2026-4834, an unauthenticated SQL injection in the WP ERP Pro WordPress plugin's recruitment REST API that lets attackers read arbitrary data from the database.

In this post i explore critical security flaws in SmartJobBoard software, including template injection, SQL injection, cross-site scripting, and remote code execution.