PT-2025-35077 · Nootheme · Jobmonster

Tran Nguyen Bao Khanh · Published 2025-08-28 · Updated 2025-08-28 · CVE-2025-54738

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NooTheme Jobmonster versions through 4.7.9

Description An Authentication Bypass Using an Alternate Path or Channel vulnerability exists in NooTheme Jobmonster, allowing Authentication Abuse.

Recommendations Update NooTheme Jobmonster to a version later than 4.7.9.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-54738

Affected Products

Jobmonster

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-54738 · Security Note
• https://patchstack.com/database/Wordpress/Theme/noo-jobmonster/vulnerability/wordpress-jobmonster-theme-4-7-9-broken-authentication-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1961052771999719681 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1961077780122124580 · Twitter Post
• https://t.me/CVEtracker/31118 · Telegram Post
• https://twitter.com/CveFindCom/status/1961053761654161497 · Twitter Post
• https://patchstack.com/database/wordpress/theme/noo-jobmonster/vulnerability/wordpress-jobmonster-theme-4-7-9-broken-authentication-vulnerability?_s_id=cve · Note