Skip to content
OpenAdvisories

Vendor

scriptsbundle

24 known vulnerabilities.

Products

AdForest 8 Nokri – Job Board WordPress Theme 4 DWT - Directory & Listing WordPress Theme 3 Nokri 2 Exertio Framework 2 Exertio 1 CarSpot 1 CarSpot – Dealership Wordpress Classified Theme 1 Buyent 1 AdForest Elementor 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-67569

    WordPress AdForest theme <= 6.0.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in scriptsbundle AdForest adforest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AdForest: from n/a through <= 6.0.11.

    scriptsbundle AdForest
  • Medium 6.4
    CVE-2025-0169

    DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The DWT - Directory & Listing WordPress Theme is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo…

    scriptsbundle DWT - Directory & Listing WordPress Theme Web / CMS
  • Medium 6.1
    CVE-2025-0170

    DWT - Directory & Listing WordPress Theme <= 3.3.3 - Reflected Cross-Site Scripting

    The DWT - Directory & Listing WordPress Theme is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping on the 'sort_by' and 'token' parameters. This makes it possible fo…

    scriptsbundle DWT - Directory & Listing WordPress Theme Web / CMS
  • Medium 4.3
    CVE-2024-12855

    AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion

    The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including, 5.1.7. This makes it possible for authenticated attackers, …

    scriptsbundle AdForest Web / CMS