SC
Vendor
scriptsbundle
26
CVEs
0
On KEV
0
New 30D
Products
AD9.8
AdForest
scriptsbundle
8 CVEs0 on KEV0 new
NJ9.8
Nokri – Job Board WordPress Theme
scriptsbundle
4 CVEs0 on KEV0 new
DD9.8
DWT - Directory & Listing WordPress Theme
scriptsbundle
3 CVEs0 on KEV0 new
CA7.1
CarSpot
scriptsbundle
2 CVEs0 on KEV0 new
EF8.5
Exertio Framework
scriptsbundle
2 CVEs0 on KEV0 new
NO9.8
Nokri
scriptsbundle
2 CVEs0 on KEV0 new
AE7.1
AdForest Elementor
scriptsbundle
1 CVEs0 on KEV0 new
BU9.8
Buyent
scriptsbundle
1 CVEs0 on KEV0 new
CD9.8
CarSpot – Dealership Wordpress Classified Theme
scriptsbundle
1 CVEs0 on KEV0 new
DL5.4
Dwt Listing
Scriptsbundle
1 CVEs0 on KEV0 new
EX9.8
Exertio
scriptsbundle
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-9049 | NJ Nokri – Job Board WordPress Theme scriptsbundle | 8.8 | Sep 5 | Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover |
| CVE-2026-18550 | NJ Nokri – Job Board WordPress Theme scriptsbundle | 9.8 | Sep 1 | Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter |
| CVE-2026-66691 | NO Nokri scriptsbundle | 9.8 | Aug 13 | WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability |
| CVE-2025-13851 | BU Buyent scriptsbundle | 9.8 | Feb 19 | Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 - Unauthenticated Privilege Escalation via User Registration |
| CVE-2026-1729 | AD AdForest scriptsbundle | 9.8 | Feb 12 | AdForest <= 6.0.12 - Authentication Bypass |
| CVE-2025-69317 | CA CarSpot scriptsbundle | 7.1 | Jan 22 | WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67947 | AE AdForest Elementor scriptsbundle | 7.1 | Jan 22 | WordPress AdForest Elementor plugin <= 3.0.11 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67946 | AD AdForest scriptsbundle | 8.1 | Jan 22 | WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability |
| CVE-2025-67569 | AD AdForest scriptsbundle | 5.3 | Dec 9 | WordPress AdForest theme <= 6.0.11 - Broken Access Control vulnerability |
| CVE-2025-58259 | NO Nokri scriptsbundle | 7.1 | Sep 22 | WordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2025-8359 | AD AdForest scriptsbundle | 9.8 | Sep 6 | AdForest <= 6.0.9 - Authentication Bypass to Admin |
| CVE-2025-49402 | EF Exertio Framework scriptsbundle | 8.5 | Aug 28 | WordPress Exertio Framework Plugin <= 1.3.3 - SQL Injection Vulnerability |
| CVE-2025-54686 | EX Exertio scriptsbundle | 9.8 | Aug 14 | WordPress Exertio Theme <= 1.3.2 - PHP Object Injection Vulnerability |
| CVE-2025-1313 | NJ Nokri – Job Board WordPress Theme scriptsbundle | 8.8 | Jul 12 | Nokri - Job Board WordPress Theme <= 1.6.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover |
| CVE-2024-12827 | DD DWT - Directory & Listing WordPress Theme scriptsbundle | 9.8 | Jun 27 | DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset |
| CVE-2024-13373 | EF Exertio Framework scriptsbundle | 8.1 | Mar 1 | Exertio Framework <= 1.3.1 - Unauthenticated Arbitrary User Password Update |
| CVE-2024-12824 | NJ Nokri – Job Board WordPress Theme scriptsbundle | 9.8 | Mar 1 | Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change |
| CVE-2024-12860 | CD CarSpot – Dealership Wordpress Classified Theme scriptsbundle | 9.8 | Feb 18 | CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 - Unauthenticated Arbitrary Password Reset/Account Takeover |
| CVE-2025-0169 | DD DWT - Directory & Listing WordPress Theme scriptsbundle | 5.4 | Feb 8 | DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2024-12857 | AD AdForest scriptsbundle | 9.8 | Jan 22 | AdForest <= 5.1.8 - Authentication Bypass |
| CVE-2025-0170 | DD DWT - Directory & Listing WordPress Theme scriptsbundle | 6.1 | Jan 16 | DWT - Directory & Listing WordPress Theme <= 3.3.3 - Reflected Cross-Site Scripting |
| CVE-2024-12855 | AD AdForest scriptsbundle | 5.4 | Jan 8 | AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion |
| CVE-2024-11350 | AD AdForest scriptsbundle | 9.8 | Jan 8 | AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover |
| CVE-2024-11349 | AD AdForest scriptsbundle | 9.8 | Dec 21 | AdForest <= 5.1.6 - Authentication Bypass |
| CVE-2019-15870 | CA Carspot Scriptsbundle | 5.4 | Sep 3 | The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field |