Nootheme vulnerabilities

Products

• Jobmonster 12
• Citilights 3
• Jobica Core 3
• Organici Library 3
• Noo Timetable 2
• Noo Timetable 2
• Visionary Core 2
• Wemusic 2
• Yogi - Health Beauty & Yoga 2

Newest

• nootheme jobmonster WordPress Jobmonster theme <= 4.8.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-57368 7.1 HighJuly 13, 2026
• nootheme jobica core WordPress Jobica Core plugin <= 1.4.2 - Account Takeover vulnerability CVE-2026-27049 9.8 CriticalMarch 25, 2026
• nootheme jobmonster WordPress Jobmonster theme < 4.8.4 - SQL Injection vulnerability CVE-2026-25340 9.3 CriticalMarch 25, 2026
• nootheme visionary core WordPress Visionary Core plugin <= 1.4.9 - PHP Object Injection vulnerability CVE-2026-24981 8.8 HighMarch 25, 2026
• nootheme visionary core WordPress Visionary Core plugin <= 1.4.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-24980 7.1 HighMarch 25, 2026
• nootheme jobica core WordPress Jobica Core plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-24979 7.1 HighMarch 25, 2026
• nootheme jobica core WordPress Jobica Core plugin <= 1.4.1 - PHP Object Injection vulnerability CVE-2026-24978 8.8 HighMarch 25, 2026
• nootheme organici library WordPress Organici Library plugin <= 2.1.2 - SQL Injection vulnerability CVE-2026-24977 8.5 HighMarch 25, 2026
• nootheme organici library WordPress Organici Library plugin <= 2.1.2 - PHP Object Injection vulnerability CVE-2026-24976 8.8 HighMarch 25, 2026
• nootheme organici library WordPress Organici Library plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-24975 7.1 HighMarch 25, 2026
• nootheme citilights WordPress CitiLights theme <= 3.7.1 - PHP Object Injection vulnerability CVE-2026-24974 8.8 HighMarch 25, 2026
• nootheme citilights WordPress CitiLights theme <= 3.7.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-24973 7.1 HighMarch 25, 2026
• nootheme citilights WordPress CitiLights theme < 3.7.2 - Broken Access Control vulnerability CVE-2026-25367 5.3 MediumFebruary 19, 2026
• nootheme jobmonster elementor addon WordPress Jobmonster Elementor Addon plugin <= 1.1.4 - Local File Inclusion vulnerability CVE-2025-67524 7.5 HighDecember 9, 2025
• nootheme jobmonster WordPress Jobmonster theme <= 4.8.2 - Local File Inclusion vulnerability CVE-2025-67522 7.5 HighDecember 9, 2025
• nootheme realty portal Realty Portal <= 0.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update CVE-2025-11985 8.8 HighNovember 21, 2025
• nootheme jobmonster WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-54737 7.1 HighNovember 6, 2025
• nootheme yogi - health beauty & yoga WordPress Yogi - Health Beauty & Yoga Theme <= 2.9.2 - Deserialization of untrusted data Vulnerability CVE-2025-54719 8.8 HighNovember 6, 2025
• nootheme yogi - health beauty & yoga WordPress Yogi - Health Beauty & Yoga theme <= 2.9.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-54718 7.1 HighNovember 6, 2025
• nootheme wemusic WordPress WeMusic Theme <= 1.9.1 - PHP Object Injection Vulnerability CVE-2025-53586 8.8 HighNovember 6, 2025
• nootheme wemusic WordPress WeMusic theme <= 1.9.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-53585 7.1 HighNovember 6, 2025
• nootheme jobmonster WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability CVE-2025-54738 9.8 CriticalAugust 28, 2025
• nootheme jobmonster WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability CVE-2025-57888 5.3 MediumAugust 22, 2025
• nootheme jobmonster WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-57887 6.5 MediumAugust 22, 2025
• nootheme jobmonster WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-53201 7.1 HighAugust 20, 2025
• nootheme realty portal – agent Realty Portal – Agent <= 0.3.9 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via rp_user_profile() Function CVE-2025-6190 8.8 HighJuly 23, 2025
• nootheme yogi WordPress Yogi theme < 2.9.3 - PHP Object Injection Vulnerability CVE-2025-24779 8.8 HighJuly 16, 2025
• nootheme job listings Job Listings 0.1 - 0.1.1 - Unauthenticated Privilege Escalation via register_action Function CVE-2025-3918 9.8 CriticalMay 3, 2025
• nootheme jobmonster WordPress Jobmonster theme <= 4.7.0 - Unauthenticated Arbitrary File Deletion vulnerability CVE-2024-37928 8.6 HighJuly 12, 2024
• nootheme jobmonster WordPress Jobmonster theme <= 4.7.5 - Unauthenticated Privilege Escalation vulnerability CVE-2024-37927 9.8 CriticalJuly 12, 2024
• nootheme noo timetable WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45821 6.5 MediumAugust 8, 2023
• nootheme noo timetable WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-45828 4.3 MediumJuly 18, 2023
• nootheme jobmonster, unknown noo jobmonster +1 more JobMonster < 4.5.2.9 - Unauthenticated Reflected Cross-Site Scripting CVE-2022-1170 6.1 MediumApril 4, 2022
• nootheme jobmonster, unknown noo jobmonster +1 more JobMonster < 4.6.6.1 - Directory Listing in Upload Folder CVE-2022-1166 5.3 MediumApril 4, 2022