Lucene search
+L

47 matches found

Positive Technologies
Positive Technologies
added 2025/01/08 12:00 a.m.12 views

PT-2025-1969 · WordPress · Adforest

Name of the Vulnerable Software and Affected Versions: AdForest theme for WordPress versions up to and including 5.1.7 Description: The issue concerns unauthorized modification of data due to a missing capability check on several AJAX actions, such as the sb remove ad action. This allows...

5.4CVSS7AI score0.00273EPSS
SaveExploits0References9
NVD
NVD
added 2024/12/21 5:15 a.m.23 views

CVE-2024-11349

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sbloginuserwithotpfun function. This makes it possible for unauthenticat...

9.8CVSS0.01229EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/21 5:15 a.m.6 views

CVE-2024-11349

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sbloginuserwithotpfun function. This makes it possible for unauthenticat...

9.8CVSS5.9AI score0.01229EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/21 4:22 a.m.34 views

CVE-2024-11349 AdForest <= 5.1.6 - Authentication Bypass

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sbloginuserwithotpfun function. This makes it possible for unauthenticat...

9.8CVSS0.01229EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/21 4:22 a.m.93 views

CVE-2024-11349

The CVE-2024-11349 entry concerns the AdForest WordPress theme (≤5.1.6). The vulnerability is an authentication bypass caused by the plugin not properly verifying a user's identity before authenticating via sb_login_user_with_otp_fun(). As a result, unauthenticated attackers can log in as arbitra...

9.8CVSS9.6AI score0.01229EPSS
SaveIn wildExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/21 4:22 a.m.14 views

CVE-2024-11349 AdForest <= 5.1.6 - Authentication Bypass

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sbloginuserwithotpfun function. This makes it possible for unauthenticat...

9.8CVSS7.5AI score0.01229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/21 12:00 a.m.22 views

PT-2024-16925 · WordPress · Adforest

Name of the Vulnerable Software and Affected Versions: AdForest theme for WordPress versions up to, and including, 5.1.6 Description: The issue is related to authentication bypass due to the plugin not properly verifying a user's identity prior to authenticating them through the sb login user wit...

9.8CVSS9.8AI score0.01229EPSS
SaveExploits0References11
Rows per page
Query Builder