CVE-2024-8615 is a critical vulnerability in the JobSearch WP Job Board WordPress plugin caused by the lack of file type validation in the jobsearch_location_load_excel_file_callback() function. This allows unauthenticated attackers to upload arbitrary files to the server, potentially enabling remote code execution. The vulnerability affects all versions up to 2.6.7. The CVSS 3.1 base score is 10.0, reflecting its network attack vector, no required privileges or user interaction, and complete impact on confidentiality, integrity, and availability. No patch or official fix details are currently available.

Successful exploitation allows unauthenticated attackers to upload arbitrary files to the affected server, which may lead to remote code execution. This can compromise the confidentiality, integrity, and availability of the affected system. Given the critical CVSS score of 10, the impact is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the vulnerable functionality if possible and monitor for suspicious file uploads. Avoid using affected versions of the plugin in production environments.