EUVD-2025-21206CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Description
The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.3. This is due to the plugin not properly validating a user's identity prior to updating their details like email address. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.
Analysis
The Nokri - Job Board WordPress Theme contains a critical privilege escalation vulnerability (CVE-2025-1313) affecting all versions up to 1.6.3, where authenticated Subscriber-level users can change arbitrary user email addresses without proper identity validation. This allows attackers to reset administrator passwords and achieve complete account takeover, resulting in full WordPress site compromise. With a CVSS score of 8.8 and low attack complexity requiring only valid subscriber credentials, this vulnerability poses significant real-world risk to WordPress installations using this theme.
Technical Context
The Nokri Job Board WordPress Theme (CPE: wp:nokri_job_board) contains an Improper Input Validation / Missing Authorization weakness (CWE-288: Authentication Bypass Using an Alternate Path or Channel) in its user profile update functionality. The theme fails to implement proper identity verification before processing user detail changes, specifically email address modifications. This is a classic broken access control vulnerability where the application accepts authenticated requests but does not verify the requester has authorization to modify the target user's account. The vulnerability exists in the theme's user management endpoints, likely in AJAX handlers or REST API endpoints that handle user profile updates, allowing any authenticated user with Subscriber role or higher to invoke privileged account modification operations without additional authorization checks.
Affected Products
Nokri - Job Board WordPress Theme (All versions up to and including 1.6.3)
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today