Approved changes feed: RSS · Atom

cpe:2.3:a:nootheme:jobmonster:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNootheme (605deb65-511e-57cf-a5f4-6d840e31956c)
ProductJobmonster (bff850b0-843d-570a-ad5a-368f17467dfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57368 vulnerable 2026-07-29 01:00:29.677909 WordPress Jobmonster theme <= 4.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through <= 4.8.5.
Published: 2026-07-13T08:41:23.763Z
Updated: 2026-07-13T16:07:54.002Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25340 vulnerable 2026-06-08 07:53:19.673665 WordPress Jobmonster theme < 4.8.4 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NooTheme Jobmonster noo-jobmonster allows Blind SQL Injection.This issue affects Jobmonster: from n/a through < 4.8.4.
Published: 2026-03-25T16:14:42.002Z
Updated: 2026-04-28T16:14:55.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67522 vulnerable 2026-06-08 07:41:19.942523 WordPress Jobmonster theme <= 4.8.2 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NooTheme Jobmonster noo-jobmonster allows PHP Local File Inclusion.This issue affects Jobmonster: from n/a through <= 4.8.2.
Published: 2025-12-09T14:13:59.066Z
Updated: 2026-04-28T16:14:19.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57888 vulnerable 2026-06-08 07:33:16.309754 WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability
MEDIUM (5.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobmonster allows Retrieve Embedded Sensitive Data.This issue affects Jobmonster: from n/a through <= 4.8.0.
Published: 2025-08-22T11:59:55.223Z
Updated: 2026-04-28T16:13:37.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57887 vulnerable 2026-06-08 07:33:16.309470 WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Stored XSS.This issue affects Jobmonster: from n/a through <= 4.8.0.
Published: 2025-08-22T11:59:54.465Z
Updated: 2026-04-28T16:13:37.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54738 vulnerable 2026-06-08 07:33:13.133782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54737 vulnerable 2026-06-08 07:33:13.133350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53201 vulnerable 2026-06-08 07:31:14.247454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37928 vulnerable 2026-06-08 06:39:48.254643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37927 vulnerable 2026-06-08 06:39:48.254244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.