https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12857.htmlhttps://patchthecve.com/cve/CVE-2024-12857.htmlWed, 17 Jun 2026 07:00:38 +0000CRITICAL 9.8: The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user's identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as any uhttps://patchthecve.com/cve/CVE-2024-12855.htmlhttps://patchthecve.com/cve/CVE-2024-12855.htmlWed, 17 Jun 2026 07:00:38 +0000MEDIUM 4.3: The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including, 5.1.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, thttps://patchthecve.com/cve/CVE-2024-11350.htmlhttps://patchthecve.com/cve/CVE-2024-11350.htmlWed, 17 Jun 2026 06:57:35 +0000CRITICAL 9.8: The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. This is due to the plugin not properly validating a user's identity prior to updating their password through the adforest_reset_password() function. This makes it