Lucene search
+L

94 matches found

NVD
NVD
added 2025/10/30 4:15 p.m.9 views

CVE-2025-61116

AdForest - Classified Android App version 4.0.12 package name scriptsbundle.adforest, developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in its authentication mechanism. The app uses a Base64-encoded email address as the authorization credential, which can be...

7.5CVSS0.00323EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/30 12:0 a.m.13 views

CVE-2025-61116

AdForest - Classified Android App version 4.0.12 package name scriptsbundle.adforest, developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in its authentication mechanism. The app uses a Base64-encoded email address as the authorization credential, which can be...

0.00323EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/30 12:0 a.m.29 views

CVE-2025-61116

CVE-2025-61116 affects AdForest – Classified Android App, v4.0.12 (package: scriptsbundle.adforest). The vulnerability arises from improper access control in authentication where a Base64-encoded email address is used as the authorization credential, allowing attackers to manipulate credentials a...

7.5CVSS6.7AI score0.00323EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/30 12:0 a.m.4 views

CVE-2025-61116

AdForest - Classified Android App version 4.0.12 package name scriptsbundle.adforest, developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in its authentication mechanism. The app uses a Base64-encoded email address as the authorization credential, which can be...

6.7AI score0.00323EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.7 views

PT-2025-44421

Name of the Vulnerable Software and Affected Versions AdForest - Classified Android App version 4.0.12 Description The AdForest - Classified Android App has an issue with how it controls access during authentication. The application utilizes a Base64-encoded email address as an authorization...

7.5CVSS6.9AI score0.00323EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.10 views

AdForest – Classified Android App 安全漏洞

AdForest - Classified Android App is a classified information system application by the individual developer Muhammad Jawad Arshad. A security vulnerability exists in AdForest - Classified Android App version 4.0.12, which stems from improper access control in the authentication mechanism, which...

7.5CVSS6.7AI score0.00323EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2024-51156

Malicious code in bioql PyPI...

5.4CVSS8.7AI score0.00273EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/10/02 4:57 p.m.355 views

Exploit for CVE-2025-8359

CVE-2025-8359 AdForest = 6.0.9 - Authentication Bypass to...

9.8CVSS6.6AI score0.00488EPSS
SaveExploits1
CNVD
CNVD
added 2025/09/09 12:0 a.m.13 views

WordPress Plugin AdForest Has Unspecified Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin AdForest 6.0.9 and prior versions, which stems from...

9.8CVSS6.9AI score0.00488EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/08 3:12 a.m.31 views

CVE-2025-8359

The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users,...

9.8CVSS5.9AI score0.00488EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/06 3:15 a.m.15 views

CVE-2025-8359

The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users,...

9.8CVSS0.00488EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/09/06 2:24 a.m.11 views

CVE-2025-8359 AdForest <= 6.0.9 - Authentication Bypass to Admin

The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users,...

9.8CVSS5.4AI score0.00488EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/09/06 2:24 a.m.23 views

CVE-2025-8359 AdForest <= 6.0.9 - Authentication Bypass to Admin

The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users,...

9.8CVSS0.00488EPSS
SaveExploits1References2
CVE
CVE
added 2025/09/06 2:24 a.m.41 views

CVE-2025-8359

CVE-2025-8359 affects the WordPress AdForest theme up to version 6.0.9. The issue is an Authentication Bypass caused by improper user identity verification during login, allowing unauthenticated attackers to log in as other users (including administrators). Public details confirm a high-severity ...

9.8CVSS5.4AI score0.00488EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2025/09/06 12:7 a.m.16 views

WordPress AdForest theme <= 6.0.9 - Authentication Bypass to Admin vulnerability

Authentication Bypass to Admin vulnerability discovered by Tonn in WordPress Theme AdForest versions = 6.0.9...

9.8CVSS7AI score0.00488EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2025/09/06 12:0 a.m.22 views

WordPress AdForest Theme <= 6.0.9 is vulnerable to Broken Authentication

Software AdForest Type Theme Vulnerable versions = 6.0.9 Fixed in 6.0.10 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2025-8359 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID f086df38edf9 Credits Tonn Required...

9.8CVSS7.1AI score0.00488EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2025/09/06 12:0 a.m.10 views

WordPress plugin AdForest 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin AdForest 6.0.9 and prior versions, which stems from...

9.8CVSS6.8AI score0.00488EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/09/06 12:0 a.m.17 views

PT-2025-36349

Name of the Vulnerable Software and Affected Versions AdForest WordPress Theme versions prior to 6.1.0 Description The AdForest theme for WordPress is susceptible to an authentication bypass, allowing unauthorized user access. The theme does not properly verify a user’s identity before...

9.8CVSS6.4AI score0.00488EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2025/05/23 6:59 a.m.16 views

CVE-2024-12855

The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sbremovead' in all versions up to, and including, 5.1.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

5.4CVSS6.5AI score0.00273EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:37 a.m.16 views

CVE-2024-12857

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user's identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as an...

9.8CVSS9.6AI score0.00746EPSS
SaveExploits0References1
Rows per page
Query Builder