WordPress security by component
Jobmonster
Theme description
Jobmonster is a WordPress component with 11 published CVE records in this archive. The latest tracked vulnerability was published Jul 13, 2026; the highest CVE/CNA score is 9.8.
Theme slug:
noo-jobmonsterLatest vulnerability
CVE-2026-57368: Jobmonster: Cross-site scripting
Jobmonster is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 4.8.5.
| Safe version |
|
||
|---|---|---|---|
| Jul 13, 2026 |
CVE-2026-57368
Jobmonster: Cross-site scripting
Jobmonster is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 4.8.5.
|
4.8.5.1 |
CVE7.1
NVDPending
|
| Mar 25, 2026 |
CVE-2026-25340
Jobmonster: SQL injection
Jobmonster is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 4.8.4.
|
4.8.4 |
CVE9.3
NVDPending
|
| Dec 09, 2025 |
CVE-2025-67522
Jobmonster: Filesystem traversal
Jobmonster is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE7.5
NVDPending
|
| Nov 06, 2025 |
CVE-2025-54737
Jobmonster: Cross-site scripting
Jobmonster is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Oct 31, 2025 |
CVE-2025-5397
Noo JobMonster: Privilege escalation or authentication bypass
Noo JobMonster is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Aug 28, 2025 |
CVE-2025-54738
Jobmonster: Privilege escalation or authentication bypass
Jobmonster is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Aug 22, 2025 |
CVE-2025-57888
Jobmonster: A security weakness
Jobmonster is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Aug 22, 2025 |
CVE-2025-57887
Jobmonster: Cross-site scripting
Jobmonster is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Aug 20, 2025 |
CVE-2025-53201
Jobmonster: Cross-site scripting
Jobmonster is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Jul 12, 2024 |
CVE-2024-37928
Jobmonster: Filesystem traversal
Jobmonster is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE8.6
NVDPending
|
| Jul 12, 2024 |
CVE-2024-37927
Jobmonster: Privilege escalation or authentication bypass
Jobmonster is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|