← Back

Jobmonster

jobmonster

Vendor: Nootheme • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1170
1Nootheme
1Jobmonster
Jun 17, 2026
Apr 4, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests.
CVE-2022-1166
1Nootheme
1Jobmonster
Jun 17, 2026
Apr 4, 2022
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resume...Show more
The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the web server, vendors can also take measures to make it less likely to happen.Show less