Authentication Bypass Vulnerability in NooTheme Jobmonster Plugin
CVE-2025-54738

9.8CRITICAL

Key Information:

Vendor

WordPress
Status
Jobmonster
Vendor
CVE Published:
28 August 2025

What is CVE-2025-54738?

An authentication bypass vulnerability exists in the NooTheme Jobmonster plugin that allows unauthorized users to gain access to restricted features through an alternate path or channel. This flaw can lead to authentication abuse, potentially compromising user accounts and sensitive information. The affected versions include Jobmonster versions from n/a up to 4.7.9.

Affected Version(s)

Jobmonster <= 4.7.9

References

https://patchstack.com/database/wordpress/theme/noo-jobmo...
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) (Patchstack Alliance)
.
CVE-2025-54738 : Authentication Bypass Vulnerability in NooTheme Jobmonster Plugin