Nokri Vulnerabilities

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.6.6

Fixed in:

1.6.7

Disclosed:

Aug 10, 2026

CVE-2026-66691 on NVD →

The Nokri theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they can trick a site...

CVSS:

4.3

Affected:

up to 1.6.4

Fix:

No patched version reported

Disclosed:

Sep 22, 2025

CVE-2025-58259 on NVD →

The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.3. This is due to the plugin not properly validating a user's identity prior to updating their details like email address. This makes it possible for authenticat...

CVSS:

8.8

Affected:

up to 1.6.3

Fixed in:

1.6.4

Disclosed:

Jul 11, 2025

CVE-2025-1313 on NVD →

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it possible for unauthenticate...

CVSS:

9.8

Affected:

up to 1.6.2

Fixed in:

1.6.3

Disclosed:

Feb 28, 2025

CVE-2024-12824 on NVD →