Noo JobMonster

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Themes   >   Noo JobMonster

Information

Software Type Theme
Software Slug noo-jobmonster
Software Status Active
Software Author Unknown
Software Website themeforest.net
Software Active Installs 5,500
Software Record Last Updated March 16, 2026

13 Vulnerabilities

Submit a Vulnerability
Noo JobMonster <= 4.8.5 - Reflected Cross-Site Scripting
6.1
CVE-2026-57368
Jul 7, 2026
Researcher: dutafi
Noo JobMonster < 4.8.4 - Unauthenticated SQL Injection
7.5
CVE-2026-25340
Mar 23, 2026
Researcher: Phat RiO
Jobmonster <= 4.8.2 - Authenticated (Contributor+) Local File Inclusion
7.5
CVE-2025-67522
Dec 12, 2025
Researcher: João Pedro Soares de Alcântara
Jobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication Bypass
9.8
CVE-2025-5397
Oct 30, 2025
Researcher: Thái An
Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting
6.1
CVE-2025-54737
Aug 31, 2025
Researcher: Ananda Dhakal
Jobmonster <= 4.8.0 - Unauthenticated Sensitive Information Disclosure
5.3
CVE-2025-57888
Aug 22, 2025
Researcher: Ananda Dhakal
Jobmonster <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-57887
Aug 22, 2025
Researcher: Ananda Dhakal
Jobmonster <= 4.7.9 - Authentication Bypass
9.8
CVE-2025-54738
Aug 21, 2025
Researcher: Tran Nguyen Bao Khanh
Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting
6.1
CVE-2025-53201
Jul 23, 2025
Researcher: Tran Nguyen Bao Khanh
Jobmonster <= 4.7.5 - Unauthenticated Privilege Escalation
9.8
CVE-2024-37927
Jul 9, 2024
Researcher: Dave Jong
Jobmonster < 4.7.5 - Unauthenticated Arbitrary File Deletion
9.1
CVE-2024-37928
Jul 9, 2024
Researcher: Dave Jong
Noo JobMonster <= 4.6.6 - Sensitive Information Disclosure via Directory Listing
5.3
CVE-2022-1166
Sep 11, 2020
Researcher: Daniel Ruf
Noo JobMonster < 4.5.2.9 - Reflected Cross-Site Scripting
6.1
CVE-2022-1170
Oct 24, 2019
Researcher: Daniel Ruf
Title Status CVE ID CVSS Researchers Date
Noo JobMonster <= 4.8.5 - Reflected Cross-Site Scripting Patched CVE-2026-57368 6.1 dutafi July 7, 2026
Noo JobMonster < 4.8.4 - Unauthenticated SQL Injection Patched CVE-2026-25340 7.5 Phat RiO March 23, 2026
Jobmonster <= 4.8.2 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-67522 7.5 João Pedro Soares de Alcântara December 12, 2025
Jobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication Bypass Patched CVE-2025-5397 9.8 Thái An October 30, 2025
Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting Patched CVE-2025-54737 6.1 Ananda Dhakal August 31, 2025
Jobmonster <= 4.8.0 - Unauthenticated Sensitive Information Disclosure Patched CVE-2025-57888 5.3 Ananda Dhakal August 22, 2025
Jobmonster <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-57887 6.4 Ananda Dhakal August 22, 2025
Jobmonster <= 4.7.9 - Authentication Bypass Patched CVE-2025-54738 9.8 Tran Nguyen Bao Khanh August 21, 2025
Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting Patched CVE-2025-53201 6.1 Tran Nguyen Bao Khanh July 23, 2025
Jobmonster <= 4.7.5 - Unauthenticated Privilege Escalation Patched CVE-2024-37927 9.8 Dave Jong July 9, 2024
Jobmonster < 4.7.5 - Unauthenticated Arbitrary File Deletion Patched CVE-2024-37928 9.1 Dave Jong July 9, 2024
Noo JobMonster <= 4.6.6 - Sensitive Information Disclosure via Directory Listing Patched CVE-2022-1166 5.3 Daniel Ruf September 11, 2020
Noo JobMonster < 4.5.2.9 - Reflected Cross-Site Scripting Patched CVE-2022-1170 6.1 Daniel Ruf October 24, 2019

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation