cleantalk
Vulnerabilities and Security Researches

Jobs for WordPress, CVE-2025-1310

CVE, Research URL

CVE-2025-1310

Application

Jobs for WordPress

Published on
Mar 26, 2025
Research Description
The Jobs for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.7.11 via the 'job_postings_get_file' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Affected versions
Min -, max 2.7.12.
Status
vulnerable