WP Job Portal Plugin Arbitrary File Read Vulnerability

A vulnerability allowing arbitrary file read has been identified in the WP Job Portal plugin for WordPress, affecting all versions through 2.4.0. The issue arises in the 'downloadCustomUploadedFile' function, where authenticated attackers with Subscriber-level access or higher can read the contents of arbitrary files on the server. This could lead to the exposure of sensitive information.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive files on the server.

Reproduction

To reproduce this vulnerability, an authenticated user with Subscriber-level access or higher can use the 'downloadCustomUploadedFile' function to request and download arbitrary files from the server. The vulnerability can be exploited by manipulating the file name parameter to access files outside of the intended directory.

Remediation

No known patch is available. It is recommended to uninstall the affected plugin and find a replacement.