Lucene search
+L

47 matches found

Positive Technologies
Positive Technologies
added 2025/01/08 12:00 a.m.11 views

PT-2025-1642 · WordPress · Adforest

Name of the Vulnerable Software and Affected Versions: AdForest theme for WordPress versions up to and including 5.1.6 Description: The issue arises from the plugin not properly validating a user's identity before updating their password through the adforest reset password function. This allows...

9.8CVSS10AI score0.00698EPSS
SaveExploits0References10
NVD
NVD
added 2024/12/21 5:15 a.m.26 views

CVE-2024-11349

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sbloginuserwithotpfun function. This makes it possible for unauthenticat...

9.8CVSS0.01229EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/21 5:15 a.m.8 views

CVE-2024-11349

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sbloginuserwithotpfun function. This makes it possible for unauthenticat...

9.8CVSS5.9AI score0.01229EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/21 4:22 a.m.37 views

CVE-2024-11349 AdForest <= 5.1.6 - Authentication Bypass

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sbloginuserwithotpfun function. This makes it possible for unauthenticat...

9.8CVSS0.01229EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/21 4:22 a.m.96 views

CVE-2024-11349

The CVE-2024-11349 entry concerns the AdForest WordPress theme (≤5.1.6). The vulnerability is an authentication bypass caused by the plugin not properly verifying a user's identity before authenticating via sb_login_user_with_otp_fun(). As a result, unauthenticated attackers can log in as arbitra...

9.8CVSS9.6AI score0.01229EPSS
SaveIn wildExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/21 4:22 a.m.15 views

CVE-2024-11349 AdForest <= 5.1.6 - Authentication Bypass

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sbloginuserwithotpfun function. This makes it possible for unauthenticat...

9.8CVSS7.5AI score0.01229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/21 12:00 a.m.26 views

PT-2024-16925 · WordPress · Adforest

Name of the Vulnerable Software and Affected Versions: AdForest theme for WordPress versions up to, and including, 5.1.6 Description: The issue is related to authentication bypass due to the plugin not properly verifying a user's identity prior to authenticating them through the sb login user wit...

9.8CVSS9.8AI score0.01229EPSS
SaveExploits0References11
Rows per page
Query Builder