https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:56:48.782363+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-283111 EUVD-2026-283111 2026-10-06T08:56:48.828407+00:00 EUVD-2026-283111 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1729 fkie_cve-2026-1729 2026-10-06T08:56:48.828448+00:00

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the 'sb_login_user_with_otp_fun' function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators.

 https://cve.radiocsirt.org/vuln/ghsa-w33v-jcj5-8c6f GHSA-w33v-jcj5-8c6f 2026-10-06T08:56:48.828483+00:00

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the 'sb_login_user_with_otp_fun' function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators.