Skip to content
OpenAdvisories

Vendor

XenForo

25 known vulnerabilities.

Products

XenForo 25
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.2
    CVE-2026-74239 Public exploit

    XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows

    XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by …

    XenForo XenForo
  • High 7.5
    CVE-2026-73316 Public exploit

    XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider

    XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate transaction ID check. Attackers can replay a valid web…

    XenForo XenForo
  • High 8.6
    CVE-2026-73315 Public exploit

    XenForo < 2.3.13 SSRF via PayPal REST Webhook Handler

    XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause the server to make outbound HTTP requests to arbitrary destinations by supplying a crafted certificate…

    XenForo XenForo
  • High 7.5
    CVE-2026-73314 Public exploit

    XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook

    XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment signature validation by submitting a webhook request with an unsupported auth_algo header value. Whe…

    XenForo XenForo
  • High 7.4
    CVE-2026-73312 Public exploit

    XenForo < 2.3.13 Refresh Token Replay via Expired Access Token

    XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multiple times by exploiting the failure to mark tokens as consumed when the parent access token has expired. Attackers can repeatedly submit th…

    XenForo XenForo
  • High 7.4
    CVE-2026-73311 Public exploit

    XenForo < 2.3.13 OAuth2 Authorization Code Reuse

    XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization …

    XenForo XenForo
  • High 7.4
    CVE-2026-73309 Public exploit

    XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpoint

    XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting empty values for client_secret and code_verifier parameters. Attackers can explo…

    XenForo XenForo