WP Job Portal Path Traversal Vulnerability Leading to Local File Inclusion

A path traversal vulnerability has been identified in the WP Job Portal WordPress plugin, specifically in versions through 2.2.8. This vulnerability allows for PHP local file inclusion, which could enable a malicious actor to include and execute local files from the server, potentially exposing sensitive information such as database credentials.

Impact

Exploitation of this vulnerability could lead to local file inclusion, allowing attackers to access and execute files on the server. This could include files containing sensitive information, such as database credentials, which could be used for a complete database takeover, depending on the site's configuration.

Remediation

Users of the WP Job Portal WordPress plugin should update to version 2.2.9 or later to address this vulnerability.