Skip to main content

Adforest

4 CVEs product

Monthly

CVE-2024-12857 Jan 22, 07:15 CRITICAL This Week

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Adforest Scriptsbundle
NVD
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-12855 Jan 08, 09:15 MEDIUM Monitor

The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Adforest Scriptsbundle
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2024-11350 Jan 08, 09:15 CRITICAL This Week

The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Adforest Scriptsbundle
NVD
CVSS 3.1
9.8
EPSS
0.3%
CVE-2024-11349 Dec 21, 05:15 CRITICAL Act Now

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Adforest Scriptsbundle
NVD
CVSS 3.1
9.8
EPSS
1.2%
EPSS 1% CVSS 9.8
CRITICAL This Week

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Adforest +1
NVD
EPSS 0% CVSS 4.3
MEDIUM Monitor

The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Adforest +1
NVD
EPSS 0% CVSS 9.8
CRITICAL This Week

The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Adforest +1
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Adforest +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy