Approved changes feed: RSS · Atom

cpe:2.3:a:nootheme:jobmonster:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNootheme (605deb65-511e-57cf-a5f4-6d840e31956c)
ProductJobmonster (bff850b0-843d-570a-ad5a-368f17467dfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25340 vulnerable 2026-06-08 07:53:19.673665 WordPress Jobmonster theme < 4.8.4 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NooTheme Jobmonster noo-jobmonster allows Blind SQL Injection.This issue affects Jobmonster: from n/a through < 4.8.4.
Published: 2026-03-25T16:14:42.002Z
Updated: 2026-04-28T16:14:55.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67522 vulnerable 2026-06-08 07:41:19.942523 WordPress Jobmonster theme <= 4.8.2 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NooTheme Jobmonster noo-jobmonster allows PHP Local File Inclusion.This issue affects Jobmonster: from n/a through <= 4.8.2.
Published: 2025-12-09T14:13:59.066Z
Updated: 2026-04-28T16:14:19.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57888 vulnerable 2026-06-08 07:33:16.309754 WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability
MEDIUM (5.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobmonster allows Retrieve Embedded Sensitive Data.This issue affects Jobmonster: from n/a through <= 4.8.0.
Published: 2025-08-22T11:59:55.223Z
Updated: 2026-04-28T16:13:37.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57887 vulnerable 2026-06-08 07:33:16.309470 WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Stored XSS.This issue affects Jobmonster: from n/a through <= 4.8.0.
Published: 2025-08-22T11:59:54.465Z
Updated: 2026-04-28T16:13:37.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54738 vulnerable 2026-06-08 07:33:13.133782 WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability
CRITICAL (9.8)
Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster noo-jobmonster allows Authentication Abuse.This issue affects Jobmonster: from n/a through <= 4.7.9.
Published: 2025-08-28T12:37:39.678Z
Updated: 2026-04-28T16:13:36.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54737 vulnerable 2026-06-08 07:33:13.133350 WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through <= 4.7.8.
Published: 2025-11-06T15:54:17.806Z
Updated: 2026-04-28T18:45:38.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53201 vulnerable 2026-06-08 07:31:14.247454 WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through <= 4.7.8.
Published: 2025-08-20T08:03:20.894Z
Updated: 2026-04-28T16:13:20.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37928 vulnerable 2026-06-08 06:39:48.254643 WordPress Jobmonster theme <= 4.7.0 - Unauthenticated Arbitrary File Deletion vulnerability
HIGH (8.6)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NooTheme Jobmonster allows File Manipulation.This issue affects Jobmonster: from n/a through 4.7.0.
Published: 2024-07-12T14:00:51.146Z
Updated: 2026-04-28T16:10:01.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37927 vulnerable 2026-06-08 06:39:48.254244 WordPress Jobmonster theme <= 4.7.5 - Unauthenticated Privilege Escalation vulnerability
CRITICAL (9.8)
Incorrect Privilege Assignment vulnerability in NooTheme Jobmonster noo-jobmonster allows Privilege Escalation.This issue affects Jobmonster: from n/a through <= 4.7.5.
Published: 2024-07-12T13:59:18.641Z
Updated: 2026-04-29T09:51:52.924Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.