CVE-2026-18550— Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter
Quick assessment
Affected
scriptsbundle Nokri – Job Board WordPress Theme
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Nokri - Job Board WordPress 主题（WordPress）存在通过账户接管导致的权限提升漏洞，影响版本为 1.6.6 及更早的所有版本。 该漏洞源于 函数中重置令牌的验证机制存在不足：攻击者可以提交一个空的令牌，而由于令牌验证逻辑存在缺陷，该空令牌能够与用户元数据（user meta）中为空或未设置的 值匹配成功。 这使得未认证的访问者（unauthenticated attacker）能够重置任意用户（包括管理员）的密码，从而获取其账户访问权限，实现权限提升和账户接管。
Possible ATT&CK Techniques 3 AI
T1190 · Exploit Public-Facing Application T1598 · Phishing for Information T1110 · Brute Force
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-18550
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the `nokri_reset_password()` function, which allows empty attacker-supplied reset tokens to match empty or unset `sb_password_forget_token` user meta values. This makes it possible for unauthenticated attackers to reset the password of any user, including administrators, and gain access to their account.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| scriptsbundle | Nokri – Job Board WordPress Theme | 0 ~ 1.6.6 | - |
|
II. Public POCs for CVE-2026-18550
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-18550
请登录查看更多情报信息。
Other References for CVE-2026-18550 (1)
Other References for CVE-2026-18550 (2)
IV. Related Vulnerabilities
Same vendor: scriptsbundle
-
CVE-2026-66691
WordPress Nokri theme <= 1.6.6 - Broken Access Control vulne -
CVE-2025-13851
Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 - Unau -
CVE-2026-1729
AdForest <= 6.0.12 - Authentication Bypass -
CVE-2025-69317
WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scrip -
CVE-2025-67947
WordPress AdForest Elementor plugin <= 3.0.11 - Cross Site S
Same weakness: CWE-269
-
CVE-2026-79744
MCPHub: Missing Authorization on `PUT /api/system-config` Le -
CVE-2026-82807
ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privil -
CVE-2026-82671
IObit Unlocker IRP_MJ_DEVICE_CONTROL IObitUnlocker.sys ZwTer -
CVE-2026-82670
IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVICE_CONT -
CVE-2026-82860
@hulumi/policies before 1.3.2 Admin Policy Bypass
V. Comments for CVE-2026-18550
No comments yet