Noo JobMonster

Noo JobMonster has 13 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 13 are fixed as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 4 critical and 2 high. 2025 was the busiest year with 7 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (38%). Other recurring categories include Authentication Bypass Using An Alternate Path Or Channel, Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 13 issues recorded for Noo JobMonster has a vendor fix available, so running the current release closes all known holes.

8 independent researchers contributed these findings, most of them (3) reported by Ananda Dhakal.

Strategic Overview

Avg CVSSHigh

7.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Noo JobMonster vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-5397

Jobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication Bypass

Read the full analysis

Vulnerability Records

13 records


2026-07-07 00:00	Noo JobMonster <= 4.8.5 - Reflected Cross-Site Scripting Noo JobMonster <= 4.8.5	`CVE-2026-57368`	6.1 Medium	dutafi	Yes
2026-03-23 00:00	Noo JobMonster < 4.8.4 - Unauthenticated SQL Injection Noo JobMonster < 4.8.4	`CVE-2026-25340`	7.5 High	Phat RiO	Yes
2025-12-12 00:00	Jobmonster <= 4.8.2 - Authenticated (Contributor+) Local File Inclusion Noo JobMonster <= 4.8.2	`CVE-2025-67522`	7.5 High	João Pedro Soares de Alcântara	Yes
2025-10-30 18:40	Jobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication Bypass Noo JobMonster <= 4.8.1	`CVE-2025-5397`	9.8 Critical	Thái An	Yes
2025-08-31 00:00	Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting Noo JobMonster <= 4.7.8	`CVE-2025-54737`	6.1 Medium	Ananda Dhakal	Yes
2025-08-22 00:00	Jobmonster <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Noo JobMonster <= 4.8.0	`CVE-2025-57887`	6.4 Medium	Ananda Dhakal	Yes
2025-08-22 00:00	Jobmonster <= 4.8.0 - Unauthenticated Sensitive Information Disclosure Noo JobMonster <= 4.8.0	`CVE-2025-57888`	5.3 Medium	Ananda Dhakal	Yes
2025-08-21 00:00	Jobmonster <= 4.7.9 - Authentication Bypass Noo JobMonster <= 4.7.9	`CVE-2025-54738`	9.8 Critical	Tran Nguyen Bao Khanh	Yes
2025-07-23 00:00	Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting Noo JobMonster <= 4.7.8	`CVE-2025-53201`	6.1 Medium	Tran Nguyen Bao Khanh	Yes
2024-07-09 00:00	Jobmonster <= 4.7.5 - Unauthenticated Privilege Escalation Noo JobMonster <= 4.7.5	`CVE-2024-37927`	9.8 Critical	Dave Jong	Yes

Showing 1–10 of 13 reports