Skip to content
OpenAdvisories

Product · scriptsbundle

AdForest

8 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3

    WordPress AdForest theme <= 6.0.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in scriptsbundle AdForest adforest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AdForest: from n/a through <= 6.0.11.

  • Medium 4.3

    AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion

    The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including, 5.1.7. This makes it possible for authenticated attackers, …