CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, including administrators, without access to a password.
Explanation of Vulnerability in Simple Terms
AdForest versions up to 6.0.9 contain an authentication bypass vulnerability that allows unauthenticated attackers to gain full control of the application. The vulnerability requires no user interaction and can be exploited remotely over the network. An attacker can read, modify, or delete any data and disrupt service availability.
What an attacker can do
Read, modify, or delete any data in the application and disrupt service availability without authentication.
Potential impact on your site
Complete compromise of the AdForest installation and all data it contains without any warning or authentication barrier.
Conditions required to exploit
Network access to the AdForest installation. No authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
