Medium · 5.4 CVE-2022-40632 EUVD-2022-43906GHSA-fwm8-52xr-cw4w

WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability

Published Nov 8, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.

Vendor	Product	Affected	Fixed
gVectors Team	wpForo Forum (WordPress plugin)	<= 2.0.5 – ≤ 2.0.5	—