Nootheme vulnerabilities
32 CVEs and advisories name Nootheme as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-57368WordPress Jobmonster theme <= 4.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-27049WordPress Jobica Core plugin <= 1.4.2 - Account Takeover vulnerability
- CVE-2026-25340WordPress Jobmonster theme < 4.8.4 - SQL Injection vulnerability
- CVE-2026-24981WordPress Visionary Core plugin <= 1.4.9 - PHP Object Injection vulnerability
- CVE-2026-24980WordPress Visionary Core plugin <= 1.4.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-24979WordPress Jobica Core plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-24978WordPress Jobica Core plugin <= 1.4.1 - PHP Object Injection vulnerability
- CVE-2026-24977WordPress Organici Library plugin <= 2.1.2 - SQL Injection vulnerability
- CVE-2026-24976WordPress Organici Library plugin <= 2.1.2 - PHP Object Injection vulnerability
- CVE-2026-24975WordPress Organici Library plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-24974WordPress CitiLights theme <= 3.7.1 - PHP Object Injection vulnerability
- CVE-2026-24973WordPress CitiLights theme <= 3.7.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-25367WordPress CitiLights theme < 3.7.2 - Broken Access Control vulnerability
- CVE-2025-67524WordPress Jobmonster Elementor Addon plugin <= 1.1.4 - Local File Inclusion vulnerability
- CVE-2025-67522WordPress Jobmonster theme <= 4.8.2 - Local File Inclusion vulnerability
- CVE-2025-11985Realty Portal <= 0.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
- CVE-2025-54737WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-54719WordPress Yogi - Health Beauty & Yoga Theme <= 2.9.2 - Deserialization of untrusted data Vulnerability
- CVE-2025-54718WordPress Yogi - Health Beauty & Yoga theme <= 2.9.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-53586WordPress WeMusic Theme <= 1.9.1 - PHP Object Injection Vulnerability
- CVE-2025-53585WordPress WeMusic theme <= 1.9.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-54738WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability
- CVE-2025-57888WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability
- CVE-2025-57887WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-53201WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-6190Realty Portal – Agent <= 0.3.9 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via rp_user_profile() Function
- CVE-2025-24779WordPress Yogi theme < 2.9.3 - PHP Object Injection Vulnerability
- CVE-2025-3918Job Listings 0.1 - 0.1.1 - Unauthenticated Privilege Escalation via register_action Function
- CVE-2024-37928WordPress Jobmonster theme <= 4.7.0 - Unauthenticated Arbitrary File Deletion vulnerability
- CVE-2024-37927WordPress Jobmonster theme <= 4.7.5 - Unauthenticated Privilege Escalation vulnerability