A SQL injection vulnerability (CVE-2026-42684) has been identified in the Ahmad WP Job Portal WordPress plugin. The vulnerability allows for blind SQL injection attacks through improper neutralization of special elements used in SQL commands. This security flaw affects WP Job Portal versions up to and including 2.5.1. The vulnerability enables attackers to potentially extract sensitive database information through blind SQL injection techniques. The issue has been assigned a high criticality rating, indicating significant security risk for affected WordPress installations using this plugin.