scriptsbundle vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 202515
3. 20268

Newest CVEs

• CVE-2025-9049

  Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover

  scriptsbundle · Nokri – Job Board WordPress Theme

  High8.8
• CVE-2026-18550

  Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter

  scriptsbundle · Nokri – Job Board WordPress Theme

  Critical9.8
• CVE-2026-66691

  WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability

  scriptsbundle · Nokri

  Critical9.8
• CVE-2025-13851

  Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 - Unauthenticated Privilege Escalation via User Registration

  scriptsbundle · Buyent

  Critical9.8
• CVE-2026-1729

  AdForest <= 6.0.12 - Authentication Bypass

  scriptsbundle · AdForest

  Critical9.8
• CVE-2025-69317

  WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

  scriptsbundle · CarSpot

  High7.1
• CVE-2025-67947

  WordPress AdForest Elementor plugin <= 3.0.11 - Cross Site Scripting (XSS) vulnerability

  scriptsbundle · AdForest Elementor

  High7.1
• CVE-2025-67946

  WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability

  scriptsbundle · AdForest

  High8.1
• CVE-2025-67569

  WordPress AdForest theme <= 6.0.11 - Broken Access Control vulnerability

  scriptsbundle · AdForest

  Medium5.3
• CVE-2025-58259

  WordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability

  scriptsbundle · Nokri

  High7.1