Scriptsbundle - vulnerabilities (CVEs)

25 CVEs in 11 products, 0 in the last 30 days, newest from 2026-09-05.

Products

Adforest - 8 CVEs
Nokri Job Board Wordpress Theme - 4 CVEs
Dwt - Directory Listing Wordpress Theme - 3 CVEs
Exertio Framework - 2 CVEs
Nokri - 2 CVEs
Adforest Elementor - 1 CVEs
Buyent - 1 CVEs
Carspot - 1 CVEs
Carspot Dealership Wordpress Classified Theme - 1 CVEs
Dwt Listing - 1 CVEs
Exertio - 1 CVEs

Newest CVEs of Scriptsbundle

CVE-2025-9049 - CVSS 8.8 (high), 2026-09-05: The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2026-18550 - CVSS 9.8 (critical), 2026-09-01: The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6.…
CVE-2026-66691 - CVSS 9.8 (critical), 2026-08-13: Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions.
CVE-2025-13851 - CVSS 9.8 (critical), 2026-02-19: The Buyent Classified plugin for WordPress (bundled with Buyent theme) is vulnerable to privilege escalation via user registration in all versions up to, and…
CVE-2026-1729 - CVSS 9.8 (critical), 2026-02-12: The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. This is due to the plugin not properly…
CVE-2025-69317 - CVSS 7.1 (high), 2026-01-22: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scriptsbundle CarSpot carspot allows Reflected XSS.This…
CVE-2025-67946 - CVSS 8.1 (high), 2026-01-22: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in scriptsbundle AdForest adforest…
CVE-2025-67947 - CVSS 7.1 (high), 2026-01-22: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scriptsbundle AdForest Elementor adforest-elementor…
CVE-2025-67569 - CVSS 5.3 (medium), 2025-12-09: Missing Authorization vulnerability in scriptsbundle AdForest adforest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-58259 - CVSS 7.1 (high), 2025-09-22: Cross-Site Request Forgery (CSRF) vulnerability in scriptsbundle Nokri nokri allows Cross Site Request Forgery.This issue affects Nokri: from n/a through <=…
CVE-2025-8359 - CVSS 9.8 (critical), 2025-09-06: The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly…
CVE-2025-49402 - CVSS 8.5 (high), 2025-08-28: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exertio Framework exertio-framework allows…
CVE-2025-54686 - CVSS 9.8 (critical), 2025-08-14: Deserialization of Untrusted Data vulnerability in scriptsbundle Exertio exertio allows Object Injection.This issue affects Exertio: from n/a through <= 1.3.2.
CVE-2025-1313 - CVSS 8.8 (high), 2025-07-12: The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including,…
CVE-2024-12827 - CVSS 9.8 (critical), 2025-06-27: The DWT - Directory & Listing WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and…
CVE-2024-13373 - CVSS 8.1 (high), 2025-03-01: The Exertio Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.1. This is due…
CVE-2024-12824 - CVSS 9.8 (critical), 2025-03-01: The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including,…
CVE-2024-12860 - CVSS 9.8 (critical), 2025-02-18: The CarSpot – Dealership Wordpress Classified Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and…
CVE-2025-0169 - CVSS 6.4 (medium), 2025-02-08: The DWT - Directory & Listing WordPress Theme is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.4 due to…
CVE-2024-12857 - CVSS 9.8 (critical), 2025-01-22: The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly…
CVE-2025-0170 - CVSS 6.1 (medium), 2025-01-16: The DWT - Directory & Listing WordPress Theme is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.3.3 due to insufficient…
CVE-2024-12855 - CVSS 5.4 (medium), 2025-01-08: The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like…
CVE-2024-11350 - CVSS 9.8 (critical), 2025-01-08: The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. This is due to the…
CVE-2024-11349 - CVSS 9.8 (critical), 2024-12-21: The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly…
CVE-2019-15870 - CVSS 5.4 (medium), 2019-09-03: The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.