A vulnerability labeled as critical has been found in shahinurislam Career Section Plugin up to 1.6 on WordPress. Affected is the function appform_options_page_html. The manipulation results in path traversal.

This vulnerability is identified as CVE-2025-14868. The attack can be executed remotely. There is not any exploit available.