Skip to content
OpenAdvisories

Product · scriptsbundle

Nokri – Job Board WordPress Theme

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8

    Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter

    The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the `nokri_reset_password()` function, which allo…

  • Critical 9.8
    CVE-2024-12824 Scanner template

    Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change

    The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their det…