CVE-2026-1729
Awaiting Analysis Awaiting Analysis - Queue
Authentication Bypass in AdForest WordPress Theme Allows Admin Access

Publication date: 2026-02-12

Last updated on: 2026-02-12

Assigner: Wordfence

Description
The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the 'sb_login_user_with_otp_fun' function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-12
Last Modified
2026-02-12
Generated
2026-06-16
AI Q&A
2026-02-12
EPSS Evaluated
2026-06-15
NVD
CVE-2026-1729
EUVD
EUVD-2026-7023
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
adforest theme to 6.0.12 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The AdForest theme for WordPress has a vulnerability that allows attackers to bypass authentication. This happens because the theme does not properly verify a user's identity before authenticating them through the 'sb_login_user_with_otp_fun' function. As a result, unauthenticated attackers can log in as any user, including administrators.

Impact Analysis

This vulnerability can have severe impacts because it allows attackers to gain unauthorized access to user accounts, including those with administrative privileges. This can lead to full control over the affected WordPress site, enabling attackers to modify content, steal sensitive information, or disrupt site operations.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-1729. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart