Description
The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the `nokri_reset_password()` function, which allows empty attacker-supplied reset tokens to match empty or unset `sb_password_forget_token` user meta values. This makes it possible for unauthenticated attackers to reset the password of any user, including administrators, and gain access to their account.
Published: 2026-09-01
Score: 9.8 Critical
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability in the Nokri – Job Board WordPress Theme permits an attacker to reset any user password by exploiting insufficient validation of the reset token parameter. A(n) unauthenticated attacker can supply an empty token that matches empty or unset metadata in the database, allowing the attacker to change the password of administrators or any user. This enables full account takeover, compromising confidentiality and integrity of site administration. The weakness is a classic Password Reset (Reset Token) bypass, classified as CWE-269.

Affected Systems

The affected product is the Nokri – Job Board WordPress Theme published by scriptsbundle, in all released versions up to and including 1.6.6. No other vendors or products are listed as impacted.

Risk and Exploitability

The CVSS score of 9.8 indicates critical severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is the public password‑reset endpoint, accessed over HTTP/HTTPS by an unauthenticated user. Based on the description, it is inferred that an attacker can craft a request to the reset URL with an empty or missing token parameter to trigger the exploit.

Generated by OpenCVE AI on September 1, 2026 at 12:54 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Nokri – Job Board WordPress Theme to the latest available version, which contains a fix for reset‑token validation.
  • If immediate update is not possible, immediately disable the theme’s password‑reset functionality or enforce a mandatory password change for all users, including administrators.
  • After applying the fix or temporary rule, audit all user accounts for suspicious changes and reset any that appear compromised.

Generated by OpenCVE AI on September 1, 2026 at 12:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 01 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Scriptsbundle
Scriptsbundle nokri – Job Board Wordpress Theme
Wordpress
Wordpress wordpress
Vendors & Products Scriptsbundle
Scriptsbundle nokri – Job Board Wordpress Theme
Wordpress
Wordpress wordpress

Tue, 01 Sep 2026 11:45:00 +0000

Type Values Removed Values Added
Description The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the `nokri_reset_password()` function, which allows empty attacker-supplied reset tokens to match empty or unset `sb_password_forget_token` user meta values. This makes it possible for unauthenticated attackers to reset the password of any user, including administrators, and gain access to their account.
Title Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter
Weaknesses CWE-269
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Scriptsbundle Nokri – Job Board Wordpress Theme
Wordpress Wordpress
cve-icon MITRE

Status: PUBLISHED

Assigner: Wordfence

Published:

Updated: 2026-09-01T11:31:07.970Z

Reserved: 2026-07-31T22:26:15.121Z

Link: CVE-2026-18550

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-01T12:17:35.920

Modified: 2026-09-01T12:17:35.920

Link: CVE-2026-18550

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-01T14:15:03Z

Weaknesses
  • CWE-269

    Improper Privilege Management