Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h248-f3px-x6hg

Опубликовано: 06 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, including administrators, without access to a password.

The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, including administrators, without access to a password.

EPSS

Процентиль: 41%
0.00186
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-288

Связанные уязвимости

CVSS3: 9.8
nvd
7 дней назад

The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, including administrators, without access to a password.

EPSS

Процентиль: 41%
0.00186
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-288