Scriptsbundle
Monthly
Unauthenticated account takeover in the Nokri - Job Board WordPress theme (versions through 1.6.6) lets remote attackers reset any user's password, including administrators. The flaw stems from the nokri_reset_password() function accepting an empty reset token that matches the empty or unset sb_password_forget_token user meta value, so no valid token is ever needed. Reported by Wordfence and rated CVSS 9.8; no public exploit or CISA KEV listing is identified at time of analysis.
Broken access control in the Nokri WordPress job board theme (versions 1.6.6 and earlier by ScriptsBundle) lets remote unauthenticated attackers bypass authorization controls to access or manipulate resources that should be restricted, with the CWE-640 mapping indicating a weakness in the account/password recovery mechanism. Rated CVSS 9.8 with a full network/no-privilege/no-interaction vector implying full confidentiality, integrity, and availability impact, this issue is reported by Patchstack and tagged as information disclosure. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Privilege escalation in the Nokri Job Board WordPress Theme (all versions through 1.6.4) allows authenticated attackers with Subscriber-level access to perform a two-stage account takeover: they invoke the unprotected nokri_account_member_permissions function to grant employer-level permissions to any Subscriber account, and the elevated Subscriber can then update the email address of any WordPress user - including Administrators - enabling full site compromise via password reset. Reported by Wordfence, this vulnerability scores CVSS 8.8 (AV:N/AC:L/PR:L). No public exploit code or CISA KEV listing has been identified at time of analysis.
The DWT - Directory & Listing WordPress Theme is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.4 due to insufficient input sanitization and output. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Unauthenticated account takeover in the Nokri - Job Board WordPress theme (versions through 1.6.6) lets remote attackers reset any user's password, including administrators. The flaw stems from the nokri_reset_password() function accepting an empty reset token that matches the empty or unset sb_password_forget_token user meta value, so no valid token is ever needed. Reported by Wordfence and rated CVSS 9.8; no public exploit or CISA KEV listing is identified at time of analysis.
Broken access control in the Nokri WordPress job board theme (versions 1.6.6 and earlier by ScriptsBundle) lets remote unauthenticated attackers bypass authorization controls to access or manipulate resources that should be restricted, with the CWE-640 mapping indicating a weakness in the account/password recovery mechanism. Rated CVSS 9.8 with a full network/no-privilege/no-interaction vector implying full confidentiality, integrity, and availability impact, this issue is reported by Patchstack and tagged as information disclosure. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Privilege escalation in the Nokri Job Board WordPress Theme (all versions through 1.6.4) allows authenticated attackers with Subscriber-level access to perform a two-stage account takeover: they invoke the unprotected nokri_account_member_permissions function to grant employer-level permissions to any Subscriber account, and the elevated Subscriber can then update the email address of any WordPress user - including Administrators - enabling full site compromise via password reset. Reported by Wordfence, this vulnerability scores CVSS 8.8 (AV:N/AC:L/PR:L). No public exploit code or CISA KEV listing has been identified at time of analysis.
The DWT - Directory & Listing WordPress Theme is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.4 due to insufficient input sanitization and output. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.