WordPress security by component

AdForest

Theme description

AdForest is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published Feb 12, 2026; the highest CVE/CNA score is 9.8.

Theme slug: adforest

Latest vulnerability

CVE-2026-1729: AdForest: Privilege escalation or authentication bypass

AdForest is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.

PublishedFeb 12, 2026

Safe version guidanceSee mitigation notes

		Safe version
Feb 12, 2026	CVE-2026-1729 AdForest: Privilege escalation or authentication bypass AdForest is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE9.8 NVDPending
Jan 22, 2026	CVE-2025-67946 AdForest: Filesystem traversal AdForest is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE8.1 NVDPending
Dec 09, 2025	CVE-2025-67569 AdForest: A security weakness AdForest is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Sep 06, 2025	CVE-2025-8359 AdForest: Privilege escalation or authentication bypass AdForest is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE9.8 NVDPending
Jan 22, 2025	CVE-2024-12857 AdForest: Privilege escalation or authentication bypass AdForest is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE9.8 NVD9.8
Jan 08, 2025	CVE-2024-12855 AdForest: A security weakness AdForest is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVD5.4
Jan 08, 2025	CVE-2024-11350 AdForest: Privilege escalation or authentication bypass AdForest is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE9.8 NVDPending
Dec 21, 2024	CVE-2024-11349 AdForest: Privilege escalation or authentication bypass AdForest is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE9.8 NVDPending