Skip to content
OpenAdvisories

Vendor

Tomdever

32 known vulnerabilities.

Products

wpForo Forum 32
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-49767

    WordPress wpForo Forum plugin <= 3.1.0 - Broken Authentication vulnerability

    Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.

    Tomdever wpForo Forum
  • Critical 9.8
    CVE-2026-49769

    WordPress wpForo Forum plugin <= 3.1.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in wpForo Forum <= 3.1.0 versions.

    Tomdever wpForo Forum
  • Critical 9.3
    CVE-2026-40798

    WordPress wpForo Forum plugin <= 3.0.4 - SQL Injection vulnerability

    Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions.

    Tomdever wpForo Forum
  • Critical 9.1
    CVE-2026-42682

    WordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects wpForo Forum: from n/a through 3.0.6.

    Tomdever wpForo Forum
  • Critical 9.9
    CVE-2024-3200

    wpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injection

    The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'slug' attribute of the 'wpforo' shortcode in all versions up to, and including, 2.3.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation …

    Tomdever wpForo Forum Web / CMS