CyberRota Analysis
AI-GeneratedThe Nokri - Job Board WordPress Theme is vulnerable to privilege escalation due to inadequate validation of reset tokens in the password reset functionality, affecting all versions up to 1.6.6. This flaw allows unauthenticated attackers to reset passwords for any user, including administrators, potentially compromising sensitive accounts. WordPress site administrators using this theme should prioritize immediate updates to mitigate the risk of account takeover.
Original NVD Description
The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the `nokri_reset_password()` function, which allows empty attacker-supplied reset tokens to match empty or unset `sb_password_forget_token` user meta values. This makes it possible for unauthenticated attackers to reset the password of any user, including administrators, and gain access to their account.