Skip to content
OpenAdvisories

Vendor

scriptsbundle

24 known vulnerabilities.

Products

AdForest 8 Nokri – Job Board WordPress Theme 4 DWT - Directory & Listing WordPress Theme 3 Nokri 2 Exertio Framework 2 Exertio 1 CarSpot 1 CarSpot – Dealership Wordpress Classified Theme 1 Buyent 1 AdForest Elementor 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2025-9049

    Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover

    The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokri_account_member_permissions' function in all versions up to, and including, 1.6.4. This makes it possib…

    scriptsbundle Nokri – Job Board WordPress Theme Web / CMS
  • High 7.1
    CVE-2025-69317

    WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scriptsbundle CarSpot carspot allows Reflected XSS.This issue affects CarSpot: from n/a through < 2.4.6.

    scriptsbundle CarSpot
  • High 7.1
    CVE-2025-67947

    WordPress AdForest Elementor plugin <= 3.0.11 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scriptsbundle AdForest Elementor adforest-elementor allows Reflected XSS.This issue affects AdForest Elementor: from n/a through <= 3.0.11.

    scriptsbundle AdForest Elementor
  • High 8.1
    CVE-2025-67946

    WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in scriptsbundle AdForest adforest allows PHP Local File Inclusion.This issue affects AdForest: from n/a through <= 6.0.11.

    scriptsbundle AdForest
  • High 7.1
    CVE-2025-58259

    WordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in scriptsbundle Nokri nokri allows Cross Site Request Forgery.This issue affects Nokri: from n/a through <= 1.6.4.

    scriptsbundle Nokri
  • High 8.5
    CVE-2025-49402

    WordPress Exertio Framework Plugin <= 1.3.3 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exertio Framework exertio-framework allows Blind SQL Injection.This issue affects Exertio Framework: from n/a through <= 1.3.3.

    scriptsbundle Exertio Framework
  • High 8.8
    CVE-2025-1313

    Nokri - Job Board WordPress Theme <= 1.6.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

    The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.3. This is due to the plugin not properly validating a user's identity prior to updating their detai…

    scriptsbundle Nokri – Job Board WordPress Theme Web / CMS
  • High 8.1
    CVE-2024-13373

    Exertio Framework <= 1.3.1 - Unauthenticated Arbitrary User Password Update

    The Exertio Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.1. This is due to the plugin not properly validating a user's identity prior to updating their password through the…

    scriptsbundle Exertio Framework Web / CMS