This vulnerability (CVE-2025-30967) in the WPJobBoard plugin involves a CSRF flaw that enables unauthorized web shell upload to the server hosting the plugin. The issue is categorized under CWE-352 and has a CVSS 3.1 base score of 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and scope change with high impact on confidentiality, integrity, and availability. The affected versions are unspecified, and no patch or official fix has been documented. The vulnerability is not related to a cloud service, and no known exploitation has been observed.

Successful exploitation allows an attacker to upload a web shell, which can lead to full compromise of the web server, including unauthorized access, data theft, and service disruption. The critical CVSS score reflects severe impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens on sensitive actions and restricting upload functionalities. Monitor for updates from the vendor or security advisories regarding patches or mitigations.