Log in Start free

NooTheme

Products

ProductCVEsExploitedLatest
Jobmonster10–Jul 13, 2026
Jobica Core3–Mar 25, 2026
CitiLights3–Mar 25, 2026
Organici Library3–Mar 25, 2026
Visionary Core2–Mar 25, 2026
WeMusic2–Nov 6, 2025
Noo Timetable2–Aug 8, 2023
Yogi - Health Beauty & Yoga2–Nov 6, 2025
Jobmonster Elementor Addon1–Dec 9, 2025
Job Listings1–May 3, 2025
Realty Portal1–Nov 21, 2025
Realty Portal – Agent1–Jul 23, 2025
Yogi1–Jul 16, 2025

Exploited and recent CVEs

  • CVE-2026-57368 High 7.1 WordPress Jobmonster theme <= 4.8.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-27049 Critical 9.8 WordPress Jobica Core plugin <= 1.4.2 - Account Takeover vulnerability 0.5%
  • CVE-2026-25340 Critical 9.3 WordPress Jobmonster theme < 4.8.4 - SQL Injection vulnerability 0.3%
  • CVE-2026-24981 High 8.8 WordPress Visionary Core plugin <= 1.4.9 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-24980 High 7.1 WordPress Visionary Core plugin <= 1.4.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24979 High 7.1 WordPress Jobica Core plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24978 High 8.8 WordPress Jobica Core plugin <= 1.4.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-24977 High 8.5 WordPress Organici Library plugin <= 2.1.2 - SQL Injection vulnerability 0.3%
  • CVE-2026-24976 High 8.8 WordPress Organici Library plugin <= 2.1.2 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-24975 High 7.1 WordPress Organici Library plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24974 High 8.8 WordPress CitiLights theme <= 3.7.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-24973 High 7.1 WordPress CitiLights theme <= 3.7.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-25367 Medium 5.3 WordPress CitiLights theme < 3.7.2 - Broken Access Control vulnerability 0.3%
  • CVE-2025-67524 High 7.5 WordPress Jobmonster Elementor Addon plugin <= 1.1.4 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-67522 High 7.5 WordPress Jobmonster theme <= 4.8.2 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-11985 High 8.8 Realty Portal <= 0.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update 0.4%
  • CVE-2025-54737 High 7.1 WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-54719 High 8.8 WordPress Yogi - Health Beauty & Yoga Theme <= 2.9.2 - Deserialization of untrusted data Vulnerability 0.4%
  • CVE-2025-54718 High 7.1 WordPress Yogi - Health Beauty & Yoga theme <= 2.9.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-53586 High 8.8 WordPress WeMusic Theme <= 1.9.1 - PHP Object Injection Vulnerability 0.5%
  • CVE-2025-53585 High 7.1 WordPress WeMusic theme <= 1.9.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-54738 Critical 9.8 WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability 0.4%
  • CVE-2025-57888 Medium 5.3 WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability 0.3%
  • CVE-2025-57887 Medium 6.5 WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-53201 High 7.1 WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-6190 High 8.8 Realty Portal – Agent <= 0.3.9 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via rp_user_profile() Function 0.5%
  • CVE-2025-24779 High 8.8 WordPress Yogi theme < 2.9.3 - PHP Object Injection Vulnerability 0.6%
  • CVE-2025-3918 Critical 9.8 Job Listings 0.1 - 0.1.1 - Unauthenticated Privilege Escalation via register_action Function 0.6%
  • CVE-2024-37928 High 8.6 WordPress Jobmonster theme <= 4.7.0 - Unauthenticated Arbitrary File Deletion vulnerability 0.6%
  • CVE-2024-37927 Critical 9.8 WordPress Jobmonster theme <= 4.7.5 - Unauthenticated Privilege Escalation vulnerability 0.5%