Skip to content
OpenAdvisories

Vendor

NooTheme

32 known vulnerabilities.

Products

Jobmonster 10 Jobica Core 3 CitiLights 3 Organici Library 3 Noo Timetable 2 Yogi - Health Beauty & Yoga 2 WeMusic 2 Visionary Core 2 Realty Portal 1 Realty Portal – Agent 1 Yogi 1 Jobmonster Elementor Addon 1 Job Listings 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-25367

    WordPress CitiLights theme < 3.7.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in NooTheme CitiLights noo-citilights allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CitiLights: from n/a through < 3.7.2.

    NooTheme CitiLights
  • Medium 5.3
    CVE-2025-57888

    WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobmonster allows Retrieve Embedded Sensitive Data.This issue affects Jobmonster: from n/a through <= 4.8.0.

    NooTheme Jobmonster
  • Medium 6.5
    CVE-2025-57887

    WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Stored XSS.This issue affects Jobmonster: from n/a through <= 4.8.0.

    NooTheme Jobmonster
  • Medium 6.5
    CVE-2022-45821

    WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in NooTheme Noo Timetable plugin <= 2.1.3 versions.

    NooTheme Noo Timetable
  • Medium 4.3
    CVE-2022-45828

    WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in NooTheme Noo Timetable plugin <= 2.1.3 versions.

    NooTheme Noo Timetable