A vulnerability labeled as critical has been found in shahinurislam Career Section Plugin up to 1.6 on WordPress. Affected is the function
appform_options_page_html. The manipulation results in path traversal.
This vulnerability is identified as CVE-2025-14868. The attack can be executed remotely. There is not any exploit available.