Description

The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, including administrators, without access to a password.

INFO

Published Date :

2025-09-06T02:24:18.546Z

Last Modified :

2026-04-08T17:19:38.437Z

Source :

Wordfence
AFFECTED PRODUCTS

The following products are affected by CVE-2025-8359 vulnerability.

Vendors Products
Scriptsbundle
  • Adforest
Wordpress
  • Wordpress
REFERENCES

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact