Skip to content
OpenAdvisories

Vendor

gVectors Team

45 known vulnerabilities.

45 results · Feed

  • Medium 5.4

    WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability

    Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved.

  • Medium 5.4

    WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.

  • High 8.8

    WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress.

  • Low 3.7

    WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure

    Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).

  • Unscored —
    CVE-2021-24406 Scanner template

    wpForo Forum < 1.9.7 - Open Redirect

    The wpForo Forum WordPress plugin before 1.9.7 did not validate the redirect_to parameter in the login form of the forum, leading to an open redirect issue after a successful login. Such issue could allow an attacker to induce a user to use a login URL redire…