This vulnerability in the Jobmonster Elementor Addon arises from improper control over the filename parameter in PHP include/require statements, enabling PHP Local File Inclusion. The affected versions are up to and including 1.1.4. The CVSS 3.1 score is 7.5, indicating a high impact with network attack vector, high attack complexity, low privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No patch or official remediation details are provided in the available data.

Successful exploitation of this vulnerability could allow an attacker to include local files on the server, potentially leading to disclosure of sensitive information, code execution, or denial of service. The CVSS score reflects high impact on confidentiality, integrity, and availability. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor NooTheme's advisories for updates. Until a fix is available, consider restricting access to the vulnerable addon and applying any recommended temporary mitigations from the vendor.