Advisories · Technology

scriptsbundle AdForest.

Every CVE that names scriptsbundle AdForest among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-1729 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

AdForest <= 6.0.12 - Authentication Bypass
- scriptsbundle AdForest
- Authentication bypass
Not analysed yet 12 Feb 2026
CVE-2025-67946 CVE record

CVSS 8.1 High

WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability
- scriptsbundle AdForest
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-67569 CVE record

CVSS 5.3 Medium

WordPress AdForest theme <= 6.0.11 - Broken Access Control vulnerability
- scriptsbundle AdForest
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-8359 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

AdForest <= 6.0.9 - Authentication Bypass to Admin
- scriptsbundle AdForest
- Authentication bypass
Not analysed yet 6 Sept 2025
CVE-2024-12857 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

AdForest <= 5.1.8 - Authentication Bypass
- scriptsbundle AdForest
- Authentication bypass
Not analysed yet 22 Jan 2025
CVE-2024-12855 CVE record

CVSS 4.3 Medium

AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion
- scriptsbundle AdForest
- Broken access control
Not analysed yet 8 Jan 2025
CVE-2024-11350 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover
- scriptsbundle AdForest
- CWE-640
Not analysed yet 8 Jan 2025
CVE-2024-11349 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

AdForest <= 5.1.6 - Authentication Bypass
- scriptsbundle AdForest
- Authentication bypass
Not analysed yet 21 Dec 2024