Skip to content
OpenAdvisories

Vendor

lucidcrew

2 known vulnerabilities.

Products

WP Forum Server 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2025-53306

    WordPress WP Forum Server plugin <= 1.8.2 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in lucidcrew WP Forum Server forum-server allows SQL Injection.This issue affects WP Forum Server: from n/a through <= 1.8.2.

    lucidcrew WP Forum Server
  • High 7.1
    CVE-2025-53305

    WordPress WP Forum Server plugin <= 1.8.2 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in lucidcrew WP Forum Server forum-server allows Stored XSS.This issue affects WP Forum Server: from n/a through <= 1.8.2.

    lucidcrew WP Forum Server