- Description
- The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sb_login_user_with_otp_fun() function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators.
- Source
- security@wordfence.com
- NVD status
- Received
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- security@wordfence.com
- CWE-288
- Hype score
- Not currently trending
[CVE-2024-11349: CRITICAL] WordPress AdForest theme up to version 5.1.6 is vulnerable to authentication bypass, allowing attackers to log in as any user, including admins. #cybersecurity#cybersecurity,#vulnerability https://t.co/wlknyWHtQe https://t.co/XuWA4fcs6g
@CveFindCom
21 Dec 2024
34 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-11349 The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying … https://t.co/vC3fhFKRjx
@CVEnew
21 Dec 2024
558 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes