Skip to content
OpenAdvisories

Product · gVectors Team

wpForo Forum (WordPress plugin)

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2022-40206

    WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability

    Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public.

    gVectors Team wpForo Forum (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-40205

    WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability

    Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved.

    gVectors Team wpForo Forum (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-40632

    WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.

    gVectors Team wpForo Forum (WordPress plugin) Web / CMS