Scriptsbundle vulnerabilities

Products

• Adforest 8
• Nokri – Job Board Wordpress Theme 4
• Dwt - Directory & Listing Wordpress Theme 3
• Carspot 2
• Exertio Framework 2
• Nokri 2

Newest

• scriptsbundle nokri – job board wordpress theme Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover CVE-2025-9049 8.8 HighSeptember 5, 2026
• scriptsbundle nokri – job board wordpress theme Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter CVE-2026-18550 9.8 CriticalSeptember 1, 2026
• scriptsbundle nokri WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability CVE-2026-66691 9.8 CriticalAugust 13, 2026
• scriptsbundle buyent Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 - Unauthenticated Privilege Escalation via User Registration CVE-2025-13851 9.8 CriticalFebruary 19, 2026
• scriptsbundle adforest AdForest <= 6.0.12 - Authentication Bypass CVE-2026-1729 9.8 CriticalFebruary 12, 2026
• scriptsbundle carspot WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69317 7.1 HighJanuary 22, 2026
• scriptsbundle adforest elementor WordPress AdForest Elementor plugin <= 3.0.11 - Cross Site Scripting (XSS) vulnerability CVE-2025-67947 7.1 HighJanuary 22, 2026
• scriptsbundle adforest WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability CVE-2025-67946 8.1 HighJanuary 22, 2026
• scriptsbundle adforest WordPress AdForest theme <= 6.0.11 - Broken Access Control vulnerability CVE-2025-67569 5.3 MediumDecember 9, 2025
• scriptsbundle nokri WordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-58259 7.1 HighSeptember 22, 2025
• scriptsbundle adforest AdForest <= 6.0.9 - Authentication Bypass to Admin CVE-2025-8359 Public exploit 9.8 CriticalSeptember 6, 2025
• scriptsbundle exertio framework WordPress Exertio Framework Plugin <= 1.3.3 - SQL Injection Vulnerability CVE-2025-49402 8.5 HighAugust 28, 2025
• scriptsbundle exertio WordPress Exertio Theme <= 1.3.2 - PHP Object Injection Vulnerability CVE-2025-54686 9.8 CriticalAugust 14, 2025
• scriptsbundle nokri – job board wordpress theme Nokri - Job Board WordPress Theme <= 1.6.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover CVE-2025-1313 8.8 HighJuly 12, 2025
• scriptsbundle dwt - directory & listing wordpress theme DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset CVE-2024-12827 9.8 CriticalJune 27, 2025
• scriptsbundle exertio framework Exertio Framework <= 1.3.1 - Unauthenticated Arbitrary User Password Update CVE-2024-13373 8.1 HighMarch 1, 2025
• scriptsbundle nokri – job board wordpress theme Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change CVE-2024-12824 9.8 CriticalMarch 1, 2025
• carspot project carspot, scriptsbundle carspot – dealership wordpress classified theme +1 more CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 - Unauthenticated Arbitrary Password Reset/Account Takeover CVE-2024-12860 9.8 CriticalFebruary 18, 2025
• scriptsbundle dwt - directory & listing wordpress theme, dwt listing +1 more DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-0169 6.4 MediumFebruary 8, 2025
• scriptsbundle adforest AdForest <= 5.1.8 - Authentication Bypass CVE-2024-12857 9.8 CriticalJanuary 22, 2025
• scriptsbundle dwt - directory & listing wordpress theme DWT - Directory & Listing WordPress Theme <= 3.3.3 - Reflected Cross-Site Scripting CVE-2025-0170 6.1 MediumJanuary 16, 2025
• scriptsbundle adforest AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion CVE-2024-12855 4.3 MediumJanuary 8, 2025
• scriptsbundle adforest AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover CVE-2024-11350 9.8 CriticalJanuary 8, 2025
• scriptsbundle adforest AdForest <= 5.1.6 - Authentication Bypass CVE-2024-11349 9.8 CriticalDecember 21, 2024
• scriptsbundle carspot The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field. CVE-2019-15870 5.4 MediumSeptember 3, 2019