CVE advisoryCRITICAL
CVE-2025-8359
AdForest WordPress Theme Authentication Bypass Affects All Versions
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The AdForest WordPress theme has an authentication bypass vulnerability. Unauthenticated attackers can log in as any user, including administrators, without a password, potentially leading to unauthorized access and malicious actions.