Log in Start free

scriptsbundle

Products

ProductCVEsExploitedLatest
AdForest8–Feb 12, 2026
Nokri – Job Board WordPress Theme4–Sep 5, 2026
DWT - Directory & Listing WordPress Theme3–Jun 27, 2025
Exertio Framework2–Aug 28, 2025
Nokri2–Aug 13, 2026
Exertio1–Aug 14, 2025
Buyent1–Feb 19, 2026
AdForest Elementor1–Jan 22, 2026
CarSpot1–Jan 22, 2026
CarSpot – Dealership Wordpress Classified Theme1–Feb 18, 2025

Exploited and recent CVEs

  • CVE-2025-9049 High 8.8 Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover 0.4%
  • CVE-2026-18550 Critical 9.8 Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter 0.6%
  • CVE-2026-66691 Critical 9.8 WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability 0.5%
  • CVE-2025-13851 Critical 9.8 Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 - Unauthenticated Privilege Escalation via User Registration 0.4%
  • CVE-2026-1729 Critical 9.8 AdForest <= 6.0.12 - Authentication Bypass 0.7%
  • CVE-2025-69317 High 7.1 WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-67947 High 7.1 WordPress AdForest Elementor plugin <= 3.0.11 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-67946 High 8.1 WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-67569 Medium 5.3 WordPress AdForest theme <= 6.0.11 - Broken Access Control vulnerability 0.3%
  • CVE-2025-58259 High 7.1 WordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-8359 Critical 9.8 AdForest <= 6.0.9 - Authentication Bypass to Admin 0.5%
  • CVE-2025-49402 High 8.5 WordPress Exertio Framework Plugin <= 1.3.3 - SQL Injection Vulnerability 0.3%
  • CVE-2025-54686 Critical 9.8 WordPress Exertio Theme <= 1.3.2 - PHP Object Injection Vulnerability 0.4%
  • CVE-2025-1313 High 8.8 Nokri - Job Board WordPress Theme <= 1.6.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover 0.4%
  • CVE-2024-12827 Critical 9.8 DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset 0.4%
  • CVE-2024-13373 High 8.1 Exertio Framework <= 1.3.1 - Unauthenticated Arbitrary User Password Update 0.4%
  • CVE-2024-12824 Critical 9.8 Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change 2.4%
  • CVE-2024-12860 Critical 9.8 CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 - Unauthenticated Arbitrary Password Reset/Account Takeover 0.5%
  • CVE-2025-0169 Medium 6.4 DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2024-12857 Critical 9.8 AdForest <= 5.1.8 - Authentication Bypass 0.8%
  • CVE-2025-0170 Medium 6.1 DWT - Directory & Listing WordPress Theme <= 3.3.3 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-12855 Medium 4.3 AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion 0.3%
  • CVE-2024-11350 Critical 9.8 AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover 0.7%
  • CVE-2024-11349 Critical 9.8 AdForest <= 5.1.6 - Authentication Bypass 1.2%