Read the docs

NooTheme

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

NooTheme records in CISA KEV

No NooTheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jobmonster 2 records LOW Noo Timetable 2 records LOW

Records

2 records in Jobmonster · all components

TI-2022-01059 CVE-2022-1170 · GHSA-7649-w6j9-939x

JobMonster < 4.5.2.9 - Unauthenticated Reflected Cross-Site Scripting

Priority LOW 31

In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01789 Published 2022-04-04 Fixed in 4.5.2.9 CWE-79
TI-2022-01055 CVE-2022-1166 · GHSA-952h-ff56-x6g3

JobMonster < 4.6.6.1 - Directory Listing in Upload Folder

Priority LOW 27

The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01552 Published 2022-04-04 Fixed in 4.5.2.9 CWE-22
Open these records in search →