Nokri – Job Board WordPress Theme vulnerabilities
4 known vulnerabilities in Nokri – Job Board WordPress Theme from Scriptsbundle. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Nokri – Job Board WordPress Theme: Missing Authorization
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokri_account_member_permissions' function in all versions up to, and including, 1.6.4. This makes it possibl
- 9.8 Critical severity
Nokri – Job Board WordPress Theme: Improper Privilege Management
The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the `nokri_reset_password()` function, which allow
- 8.8 High severity
Nokri – Job Board WordPress Theme: Authentication Bypass Using an Alternate Path or Channel
The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.3. This is due to the plugin not properly validating a user's identity prior to updating their detail
- 9.8 Critical severity
Nokri – Job Board WordPress Theme: Unverified Password Change
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their deta