132 matches found
WordPress Jobmonster Theme <= 4.8.0 is vulnerable to Sensitive Data Exposure
Software Jobmonster Type Theme Vulnerable versions = 4.8.0 Fixed in 4.8.1 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2025-57888 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d34cfa4cbbae Credits Ananda Dhakal Patchstack Required...
WordPress Jobmonster Theme <= 4.8.0 is vulnerable to Cross Site Scripting (XSS)
Software Jobmonster Type Theme Vulnerable versions = 4.8.0 Fixed in 4.8.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-57887 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 409b4cb6ad34 Credits Ananda Dhakal Patchstack Required privilege...
WordPress plugin Jobmonster 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin Jobmonster 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2025-34353 · Nootheme · Jobmonster
Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.8.0 Description: A vulnerability exists in NooTheme Jobmonster that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere...
PT-2025-34352 · Nootheme · Jobmonster
Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.8.0 Description: The software contains a Stored Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into...
WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability
Broken Authentication Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Jobmonster versions = 4.7.9...
WordPress Jobmonster Theme <= 4.7.9 is vulnerable to Broken Authentication
Software Jobmonster Type Theme Vulnerable versions = 4.7.9 Fixed in 4.8.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2025-54738 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 87e1e5542be4 Credits Tran Nguyen...
CVE-2025-53201
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through = 4.7.8...
CVE-2025-53201
CVE-2025-53201 refers to a Reflected XSS in NooTheme Jobmonster (WordPress theme) up to version 4.7.8. The vulnerability arises from improper input neutralization during web page generation, enabling cross-site scripting when an unauthenticated actor injects malicious input. Public sources in con...
CVE-2025-53201 WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through = 4.7.8...
CVE-2025-53201 WordPress Jobmonster <= 4.7.8 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster allows Reflected XSS. This issue affects Jobmonster: from n/a through 4.7.8...
PT-2025-33969 · Nootheme · Jobmonster
Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.7.8 Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in NooTheme Jobmonster, allowing Reflected XSS. Recommendations: At the moment, there i...
WordPress plugin Jobmonster 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Jobmonster versions = 4.7.8...
CVE-2022-1170
In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests...
CVE-2022-1166
The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the we...
CVE-2024-37928
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NooTheme Jobmonster allows File Manipulation.This issue affects Jobmonster: from n/a through 4.7.0...