Authentication Bypass Vulnerability in Noo JobMonster Theme by WordPress

CVE-2025-5397

What is CVE-2025-5397?

The Noo JobMonster theme for WordPress is susceptible to an Authentication Bypass vulnerability affecting all versions up to and including 4.8.1. This flaw arises from the inadequate verification performed by the check_login() function, allowing attackers to circumvent standard authentication processes and potentially gain access to administrative user accounts. For this vulnerability to be exploited, social login must be enabled on the affected WordPress site, exposing it to a higher risk. Website administrators are urged to apply updates promptly to mitigate unauthorized access.

References