CVE-2025-57888: 
WordPress vulnerability analysis and mitigation

A sensitive data exposure vulnerability (CVE-2025-57888) was discovered in NooTheme Jobmonster WordPress theme versions through 4.8.0. The vulnerability was reported by Ananda Dhakal and publicly disclosed on August 22, 2025. This security issue allows unauthorized access to sensitive system information (NVD, Patchstack).

The vulnerability is classified as an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). It received a CVSS v3.1 base score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating that it is network-accessible, requires low attack complexity, and needs no privileges or user interaction to exploit (NVD, Patchstack).

The vulnerability allows malicious actors to view sensitive information that is normally not accessible to regular users. This exposed data could potentially be used as a stepping stone to exploit other weaknesses in the system (Patchstack).

The vulnerability has been fixed in version 4.8.1 of the Jobmonster theme. Users are advised to update to version 4.8.1 or later to remove the vulnerability (Patchstack).