8.8
High
CVE-2025-9049 The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a…
Description
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokri_account_member_permissions' function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add new Subscriber users with employer account member permissions, who in turn can escalate privileges by updating the email address of any user, including Administrator users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Nokri – Job Board WordPress Theme 1.6 | earliest → 1.6.4 | No fix stated |
Other CVEs of Nokri – Job Board WordPress Theme
The 4 CVEs of Nokri – Job Board WordPress Theme →
CVE-2026-18550
The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all…
9.8
Critical
CVE-2025-1313
The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover…
8.8
High
CVE-2024-12824
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover…
9.8
Critical