An unauthenticated privilege escalation vulnerability in the Nokri Job Board WordPress theme allows attackers to take over any user account, including administrator accounts, posing a critical risk to site integrity.

The vulnerability exists within the nokri_reset_password() function, where insufficient validation of reset tokens allows an unauthenticated attacker to supply an empty token that matches unset user meta values. This flaw permits an attacker to reset the password of any registered user, granting full account access.

Successful exploitation of this vulnerability results in full account compromise, including administrative takeover, which can lead to complete site control, unauthorized data exfiltration, and the injection of malicious content. With a CVSS score of 9.8, this flaw represents a critical threat to business continuity and data security, as it bypasses standard authentication mechanisms without requiring prior access.

Immediate Action: Update the Nokri – Job Board WordPress Theme to version 1.6.7 or later to implement the required token validation logic.

Proactive Monitoring: Review authentication logs and password reset request patterns for unusual spikes or multiple attempts targeting administrative accounts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious password reset requests that lack valid tokens or originate from unexpected sources.

Public Exploit Available: Unknown

This is a critical vulnerability that demands immediate attention due to the ease with which an attacker can escalate privileges. Administrators should verify their current version and apply the 1.6.7 patch immediately to prevent potential account takeover attempts. If an immediate update is not possible, prioritize restricting access to the affected password reset functionality.