Bleepingcomputer

Critical Authentication Bypass Flaw in JobMonster WordPress Theme Exploited

First seen 2 Dec 2025, 18:33 UTC • Bleepingcomputer

•33.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Hackers are exploiting a critical authentication bypass vulnerability (CVE-2025-5397) in the JobMonster WordPress theme, allowing unauthorized access to administrative accounts. This flaw, rated 9.8 in severity, poses risks such as data theft and impersonation scams. The theme, developed by NooThemes, has over 5,600 sales on the ThemeForest marketplace.

How this analysis works

Attack Flow

Continue Reading

CVE-2026-2441: Zero-Day CSS Vulnerability in Chromium-Based Browsers Critical Joomla JCE Vulnerability Under Active Exploitation Lazarus Group Exploits Windows Zero-Day to Target Defense Sector Critical Flaw in Modular DS WordPress Plugin Enables Admin Takeover Critical SQL Injection Vulnerability in GPTranslate Plugin (CVE-2026-49776) Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks

Critical Authentication Bypass Flaw in JobMonster WordPress Theme Exploited

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading