CVE-2026-1729 | AdForest Plugin up to 6.0.12 on WordPress sb_login_user_with_otp_fun improper authentication

A vulnerability was found in AdForest Plugin up to 6.0.12 on WordPress and classified as critical. This vulnerability affects the function sb_login_user_with_otp_fun. Such manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-1729. The attack may be launched remotely. There is no exploit available.