Nokri Job Board Wordpress Theme
Monthly
Unauthenticated account takeover in the Nokri - Job Board WordPress theme (versions through 1.6.6) lets remote attackers reset any user's password, including administrators. The flaw stems from the nokri_reset_password() function accepting an empty reset token that matches the empty or unset sb_password_forget_token user meta value, so no valid token is ever needed. Reported by Wordfence and rated CVSS 9.8; no public exploit or CISA KEV listing is identified at time of analysis.
Privilege escalation in the Nokri Job Board WordPress Theme (all versions through 1.6.4) allows authenticated attackers with Subscriber-level access to perform a two-stage account takeover: they invoke the unprotected nokri_account_member_permissions function to grant employer-level permissions to any Subscriber account, and the elevated Subscriber can then update the email address of any WordPress user - including Administrators - enabling full site compromise via password reset. Reported by Wordfence, this vulnerability scores CVSS 8.8 (AV:N/AC:L/PR:L). No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated account takeover in the Nokri - Job Board WordPress theme (versions through 1.6.6) lets remote attackers reset any user's password, including administrators. The flaw stems from the nokri_reset_password() function accepting an empty reset token that matches the empty or unset sb_password_forget_token user meta value, so no valid token is ever needed. Reported by Wordfence and rated CVSS 9.8; no public exploit or CISA KEV listing is identified at time of analysis.
Privilege escalation in the Nokri Job Board WordPress Theme (all versions through 1.6.4) allows authenticated attackers with Subscriber-level access to perform a two-stage account takeover: they invoke the unprotected nokri_account_member_permissions function to grant employer-level permissions to any Subscriber account, and the elevated Subscriber can then update the email address of any WordPress user - including Administrators - enabling full site compromise via password reset. Reported by Wordfence, this vulnerability scores CVSS 8.8 (AV:N/AC:L/PR:L). No public exploit code or CISA KEV listing has been identified at time of analysis.