Executive brief
The Nokri Job Board WordPress Theme is a popular job listing and recruitment platform for WordPress websites. An unauthenticated attacker can bypass password reset token validation to reset passwords of any user, including administrators, enabling complete account takeover and unauthorized access to the platform and its data.
Technical details
The vulnerability is a privilege escalation via account takeover caused by insufficient reset token validation in the `nokri_reset_password()` function. The vulnerable code compares user-supplied empty reset tokens against empty or unset user meta values (`sb_password_forget_token`), resulting in a match condition that allows an attacker to reset any user's password without authentication. An unauthenticated attacker can exploit this via the password reset mechanism over the network to gain administrator access. The vulnerability affects all versions up to and including 1.6.6; patch availability from the vendor has not been confirmed.
Affected products
- Nokri Nokri - Job Board WordPress Theme up to and including 1.6.6
Timeline
- 2026-09-01: disclosed