Authentication vulnerability in Nokri – Job Board WordPress Theme 1.6.3

A popular WordPress theme called “Nokri – Job Board” has a security issue that can allow someone to take control of another user’s account. This is because the theme does not properly check a user’s identity before allowing them to change their email address. This means that someone with at least “Subscriber” level access could change the email address of any user, even an administrator, and use that to reset their password and gain access to their account.