CVE-2025-67522 — PHP Remote File Inclusion in Jobmonster

CWE-98 — PHP Remote File Inclusion4 documents4 sources
Severity
9.8CRITICALNVD
EPSS
0.2%
top 55.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nootheme Jobmonster
Timeline
PublishedDec 9

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NooTheme Jobmonster noo-jobmonster allows PHP Local File Inclusion.This issue affects Jobmonster: from n/a through <= 4.8.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶CVEListV5nootheme/jobmonster4.8.2

🔴Vulnerability Details

2
GHSA
GHSA-2qh4-8p36-478q: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NooTheme Jobmonster noo-jobmo↗2025-12-09
▶
CVEList
WordPress Jobmonster theme <= 4.8.2 - Local File Inclusion vulnerability↗2025-12-09
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-67522 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-67522 — PHP Remote File Inclusion | cvebase