The jobs for WordPress plugin contains a directory traversal flaw triggered by the job_postings_get_file parameter. When an authenticated user with Subscriber-level access supplies a crafted value, the plugin resolves the path without proper sanitization, allowing the attacker to read the contents of arbitrary files on the server. This results in confidentiality loss; the attacker can obtain sensitive data such as configuration files or credentials. The vulnerability is a classic file path traversal, identified as CWE-22.

The flaw affects the Job Postings plugin released by blueglassch, versions up to and including 2.7.11. Sites running any of those plugin versions and granting Subscriber-level roles are potentially exposed. No higher versions are reported as affected.

The CVSS score of 6.5 reflects moderate severity, while an EPSS score of 1% indicates a low, but non-zero, probability of exploitation. The vulnerability is not listed in CISA's KEV catalog, suggesting no publicly known exploits as of now. Attackers must first authenticate with Subscriber or higher privileges, so the risk is contained to sites with such user bases. Once authenticated, they could read files on the server, exposing data but not necessarily gaining code execution.