CVE-2025-8359 is an authentication bypass vulnerability in the AdForest WordPress theme (versions up to 6.0.9) caused by inadequate verification of user identity prior to authentication. This allows attackers without any privileges to authenticate as arbitrary users, including administrators, without supplying valid credentials. The vulnerability is classified under CWE-288 (Authentication Bypass Using an Alternate Path or Channel) and has a CVSS 3.1 base score of 9.8, reflecting its critical severity and network attack vector with no required privileges or user interaction.

Successful exploitation enables unauthenticated attackers to gain full access to affected WordPress sites using the AdForest theme, including administrative privileges. This compromises confidentiality, integrity, and availability of the site and its data. The vulnerability can lead to complete site takeover, unauthorized data access, and potential further malicious activities.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to monitor the vendor's communications closely and consider disabling or replacing the AdForest theme to prevent exploitation. Avoid using affected versions in production environments.