The vulnerability in JobZilla permits a subscriber‑level user to elevate their privileges within the WordPress site. By exploiting this flaw, a logged‑in subscriber may obtain higher privileges, potentially including administrative access, which threatens the confidentiality, integrity, and availability of the entire site.

DexignZone’s JobZilla – Job Board WordPress Theme as used on any WordPress installation running version 2.2 or earlier.

The flaw has a CVSS score of 8.8, indicating high severity. EPSS score is 0.00338, indicating a very low but non‑zero exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector requires authentication as a subscriber; once authenticated, the attacker can trigger the privilege escalation without additional external conditions.