2 matches found
VulnCheck KEV: CVE-2024-11349
The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sbloginuserwithotpfun function. This makes it possible for unauthenticat...
9.8CVSS7.6AI score0.01229EPSS
SaveIn wildExploits0References2
PT-2026-7806
Name of the Vulnerable Software and Affected Versions AdForest versions up to and including 6.0.12 Description The AdForest theme for WordPress is susceptible to authentication bypass. The issue stems from insufficient user identity verification before authentication via the sb login user with ot...
9.8CVSS5.1AI score0.00581EPSS
SaveExploits1References10
20