Thème WordPress
Vulnérabilités Noo JobMonster
Cette page rassemble les failles publiées pour Noo JobMonster, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Noo JobMonster
12 fiches
Noo JobMonster < 4.8.4 – Unauthenticated SQL Injection
The Noo JobMonster theme for WordPress is vulnerable to SQL Injection in versions up to 4.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
[*, 4.8.4)
4.8.4
23/03/2026
Jobmonster <= 4.8.2 – Authenticated (Contributor+) Local File Inclusion
The Jobmonster theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.8.2. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the…
*-4.8.2
4.8.3
12/12/2025
Jobmonster – Job Board WordPress Theme <= 4.8.1 – Authentication Bypass
The Noo JobMonster theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.8.1. This is due to the check_login() function not properly verifying a user's identity prior to successfully authenticating them This…
*-4.8.1
4.8.2
30/10/2025
Jobmonster <= 4.7.8 – Reflected Cross-Site Scripting
The Jobmonster theme for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.7.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-4.7.8
4.7.9
31/08/2025
Jobmonster <= 4.8.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Jobmonster theme for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-4.8.0
4.8.1
22/08/2025
Jobmonster <= 4.8.0 – Unauthenticated Sensitive Information Disclosure
The Noo JobMonster theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.8.0. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.
*-4.8.0
4.8.1
22/08/2025
Jobmonster <= 4.7.9 – Authentication Bypass
The Noo JobMonster theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.7.9.This makes it possible for unauthenticated attackers to bypass authentication and log in as other users, including administrators.
*-4.7.9
4.8.0
21/08/2025
Jobmonster <= 4.7.8 – Reflected Cross-Site Scripting
The Noo JobMonster theme for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 4.7.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
*-4.7.8
4.7.9
23/07/2025
Jobmonster <= 4.7.5 – Unauthenticated Privilege Escalation
The Noo JobMonster theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.7.5. This makes it possible for unauthenticated attackers to gain higher privileged access to a vulnerable site.
*-4.7.5
4.7.6
09/07/2024
Jobmonster < 4.7.5 – Unauthenticated Arbitrary File Deletion
The Noo JobMonster theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and not including, 4.7.5. This makes it possible for unauthenticated attackers to…
[*, 4.7.5)
4.7.5
09/07/2024
Noo JobMonster <= 4.6.6 – Sensitive Information Disclosure via Directory Listing
The Noo JobMonster theme is vulnerable to Sensitive Information Disclosure via Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file in versions up to, and including 4.6.6. This could…
*-4.6.6
4.6.6.1
11/09/2020
Noo JobMonster < 4.5.2.9 – Reflected Cross-Site Scripting
In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests.
[*, 4.5.2.9)
4.5.2.9
24/10/2019
Thèmes également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.