CVE-2024-12824
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 1, 2025
CWE ID 620
Summary
CVE-2024-12824 is a privilege escalation vulnerability affecting the Nokri – Job Board WordPress Theme. Versions up to 1.6.2 are susceptible to this issue. An attacker can exploit this vulnerability by manipulating a token value during password updates, allowing them to change arbitrary user passwords, including those of administrators. Successful exploitation grants the attacker access to the compromised account, potentially leading to unauthorized site management.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.