AdForest WordPress Theme Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in the AdForest theme for WordPress, affecting all versions through 6.0.9. The issue arises because the theme does not adequately verify user identities before authentication, enabling unauthenticated attackers to log in as other users, including administrators, without a password.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain administrative access on the affected WordPress site.

Remediation

Users are advised to update the AdForest theme to version 6.0.10 or a newer patched version.