Jobs for WordPress Directory Traversal Vulnerability Allowing Arbitrary File Read

A directory traversal vulnerability has been identified in the Jobs for WordPress plugin, affecting all versions through 2.7.11. This vulnerability allows authenticated attackers with Subscriber-level access and above to read arbitrary files on the server via the 'job_postings_get_file' parameter. The exploited files could contain sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information stored in files on the server.

Remediation

Users are advised to update the Jobs for WordPress plugin to version 2.7.12 or a newer patched version.