Adforest

3 CVEs product

Monthly

CVE-2024-12857 CRITICAL This Week

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass WordPress Adforest
NVD
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-12855 MEDIUM Monitor

The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass WordPress Adforest
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2024-11350 CRITICAL This Week

The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Adforest
NVD
CVSS 3.1
9.8
EPSS
0.3%
EPSS 1% CVSS 9.8
CRITICAL This Week

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass WordPress Adforest
NVD
EPSS 0% CVSS 4.3
MEDIUM Monitor

The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass WordPress Adforest
NVD
EPSS 0% CVSS 9.8
CRITICAL This Week

The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Adforest
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy