AdForest WordPress Theme Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in the AdForest theme for WordPress, affecting all versions through 5.1.8. The issue arises because the theme fails to properly verify a user's identity before logging them in. This flaw enables unauthenticated attackers to authenticate as any user who has set up OTP login via phone number.

Impact

Exploitation of this vulnerability allows unauthenticated attackers to bypass authentication and log in as any user with OTP login enabled.

Remediation

Users are advised to update the AdForest WordPress theme to version 5.1.9 or a newer patched version.