Authentication Bypass Vulnerability in Noo JobMonster Theme by WordPress

CVE-2025-5397

What is CVE-2025-5397?

The Noo JobMonster theme for WordPress is susceptible to an Authentication Bypass vulnerability affecting all versions up to and including 4.8.1. This flaw arises from the inadequate verification performed by the check_login() function, allowing attackers to circumvent standard authentication processes and potentially gain access to administrative user accounts. For this vulnerability to be exploited, social login must be enabled on the affected WordPress site, exposing it to a higher risk. Website administrators are urged to apply updates promptly to mitigate unauthorized access.

News Articles

BleepingComputer

CVE-2025-5397

Hackers exploit critical auth bypass flaw in JobMonster WordPress theme

Threat actors are targeting a critical vulnerability in the JobMonster WordPress theme that allows hijacking of administrator accounts under certain conditions.

3 weeks ago

References