The WP Job Portal plugin for WordPress versions up to 2.3.1 contains a Local File Inclusion vulnerability due to improper control of filenames in PHP include/require statements. This vulnerability enables an attacker to include local files on the server, which can lead to remote code execution or disclosure of sensitive information. The CVSS 3.1 vector indicates network attack vector with high complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official fix information is currently available.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized disclosure of sensitive data, modification of data, and disruption of service. The vulnerability affects the confidentiality, integrity, and availability of the system running the vulnerable WP Job Portal plugin. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the vulnerable WP Job Portal plugin or applying any available temporary mitigations recommended by the vendor. Monitor official vendor channels for updates and patches.