CVE-2025-58259 WordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in scriptsbundle Nokri nokri allows Cross Site Request Forgery.This issue affects Nokri: from n/a through = 1.6.4...

WordPress Nokri Theme <= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Nokri Type Theme Vulnerable versions = 1.6.4 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2025-58259 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 2379088ca94b Credits Tran Nguyen Bao Khanh VCI -...

WordPress Nokri theme <= 1.6.2 - Unauthenticated Arbitrary Password Change vulnerability

Unauthenticated Arbitrary Password Change vulnerability discovered by Lucio Sá in WordPress Theme Nokri versions = 1.6.2...