Vendor
gVectors Team
45 known vulnerabilities.
Products
45 results · Feed
-
Medium 5.4
WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability
Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved.
-
Medium 5.4
WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.
-
High 8.8
WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress.
-
Low 3.7
WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure
Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).
-
Unscored —CVE-2021-24406 Scanner template
wpForo Forum < 1.9.7 - Open Redirect
The wpForo Forum WordPress plugin before 1.9.7 did not validate the redirect_to parameter in the login form of the forum, leading to an open redirect issue after a successful login. Such issue could allow an attacker to induce a user to use a login URL redire…