Skip to content
OpenAdvisories

Vendor

NooTheme

32 known vulnerabilities.

Products

Jobmonster 10 Jobica Core 3 CitiLights 3 Organici Library 3 Noo Timetable 2 Yogi - Health Beauty & Yoga 2 WeMusic 2 Visionary Core 2 Realty Portal 1 Realty Portal – Agent 1 Yogi 1 Jobmonster Elementor Addon 1 Job Listings 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27049

    WordPress Jobica Core plugin <= 1.4.2 - Account Takeover vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobica Core jobica-core allows Authentication Abuse.This issue affects Jobica Core: from n/a through <= 1.4.2.

    NooTheme Jobica Core
  • Critical 9.3
    CVE-2026-25340

    WordPress Jobmonster theme < 4.8.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NooTheme Jobmonster noo-jobmonster allows Blind SQL Injection.This issue affects Jobmonster: from n/a through < 4.8.4.

    NooTheme Jobmonster
  • Critical 9.8
    CVE-2025-54738

    WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster noo-jobmonster allows Authentication Abuse.This issue affects Jobmonster: from n/a through <= 4.7.9.

    NooTheme Jobmonster
  • Critical 9.8
    CVE-2025-3918

    Job Listings 0.1 - 0.1.1 - Unauthenticated Privilege Escalation via register_action Function

    The Job Listings plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization within the register_action() function in versions 0.1 to 0.1.1. The plugin’s registration handler reads the client-supplied $_POST['user_role'] and passe…

    NooTheme Job Listings Web / CMS
  • Critical 9.8
    CVE-2024-37927

    WordPress Jobmonster theme <= 4.7.5 - Unauthenticated Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in NooTheme Jobmonster noo-jobmonster allows Privilege Escalation.This issue affects Jobmonster: from n/a through <= 4.7.5.

    NooTheme Jobmonster