126 matches found
CVE-2025-53201
CVE-2025-53201 refers to a Reflected XSS in NooTheme Jobmonster (WordPress theme) up to version 4.7.8. The vulnerability arises from improper input neutralization during web page generation, enabling cross-site scripting when an unauthenticated actor injects malicious input. Public sources in con...
CVE-2025-53201 WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through = 4.7.8...
PT-2025-33969 · Nootheme · Jobmonster
Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.7.8 Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in NooTheme Jobmonster, allowing Reflected XSS. Recommendations: At the moment, there i...
CVE-2025-24779
Deserialization of Untrusted Data vulnerability in NooTheme Yogi yogi allows Object Injection.This issue affects Yogi: from n/a through 2.9.3...
CVE-2025-24779
Deserialization of Untrusted Data vulnerability in NooTheme Yogi yogi allows Object Injection.This issue affects Yogi: from n/a through 2.9.3...
CVE-2025-24779 WordPress Yogi theme <= 2.9.0 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in NooTheme Yogi allows Object Injection. This issue affects Yogi: from n/a through 2.9.0...
PT-2025-29777 · Nootheme · Nootheme Yogi
Name of the Vulnerable Software and Affected Versions: NooTheme Yogi versions through 2.9.0 Description: The software contains a deserialization of untrusted data flaw that allows for object injection. Recommendations: Update NooTheme Yogi to a version later than 2.9.0...
CVE-2022-45828
Cross-Site Request Forgery CSRF vulnerability in NooTheme Noo Timetable plugin = 2.1.3 versions...
CVE-2022-45821
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in NooTheme Noo Timetable plugin = 2.1.3 versions...
CVE-2024-37928
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NooTheme Jobmonster allows File Manipulation.This issue affects Jobmonster: from n/a through 4.7.0...
CVE-2024-37927
Incorrect Privilege Assignment vulnerability in NooTheme Jobmonster noo-jobmonster allows Privilege Escalation.This issue affects Jobmonster: from n/a through = 4.7.5...
CVE-2024-37927
Incorrect Privilege Assignment vulnerability in NooTheme Jobmonster noo-jobmonster allows Privilege Escalation.This issue affects Jobmonster: from n/a through = 4.7.5...
CVE-2024-37928
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NooTheme Jobmonster allows File Manipulation.This issue affects Jobmonster: from n/a through 4.7.0...
CVE-2024-37928 WordPress Jobmonster theme <= 4.7.0 - Unauthenticated Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NooTheme Jobmonster allows File Manipulation.This issue affects Jobmonster: from n/a through 4.7.0...
CVE-2024-37928
CVE-2024-37928 is a Path Traversal vulnerability in Noo JobMonster (WordPress theme) that enables file manipulation. Affected: Jobmonster
CVE-2024-37928 WordPress Jobmonster theme <= 4.7.0 - Unauthenticated Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NooTheme Jobmonster allows File Manipulation.This issue affects Jobmonster: from n/a through 4.7.0...
CVE-2024-37927
CVE-2024-37927 relates to Noo Theme’s JobMonster (noo-jobmonster) WordPress theme. The connected sources confirm an unauthenticated Privilege Escalation due to an Incorrect Privilege Assignment in Jobmonster versions up to 4.7.0 (Some sources list up to 4.7.5). The vulnerability allows an attacke...
CVE-2022-45821
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in NooTheme Noo Timetable plugin = 2.1.3 versions...
