This vulnerability in WPJobBoard (versions before 5.11.1) involves a path traversal issue triggered by the '.../...//' sequence. An attacker with low privileges and no user interaction can exploit this to access or modify files outside the intended directory scope, impacting confidentiality and integrity. The CVSS 3.1 score is 5.4, reflecting medium severity with network attack vector, low attack complexity, and no privileges required beyond low privileges.

Exploitation could allow an attacker to read or modify files outside the intended directory structure, potentially exposing sensitive information or altering data. The impact is limited to confidentiality and integrity with no availability impact. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin and monitor for suspicious activity related to path traversal attempts. Avoid exposing the plugin to untrusted users with low privileges if possible.