https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:46:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-284039 EUVD-2026-284039 https://cve.radiocsirt.org/vuln/euvd-2026-284039 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12857 <p>The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user&#39;s identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as any user as long as they have configured OTP login by phone number.</p> <p>The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user&#39;s identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as any user as long as they have configured OTP login by phone number.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-12857 https://cve.radiocsirt.org/vuln/ghsa-ch5m-r77h-m55x <p>The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user&#39;s identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as any user as long as they have configured OTP login by phone number.</p> <p>The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user&#39;s identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as any user as long as they have configured OTP login by phone number.</p> https://cve.radiocsirt.org/vuln/ghsa-ch5m-r77h-m55x