Description
wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers exploit the wpfob parameter with CASE WHEN payloads to perform blind boolean extraction of credentials from the WordPress database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| gVectors Team | wpForo Forum | 2.4 – < 2.4.15 | 2.4.15 |
References
- wpForo Forum WordPress Plugin product
- wpForo Forum Contributors & Developers patch
- VulnCheck Advisory: wpForo 2.4.14 SQL Injection via Topics ORDER BY Parameter third-party-advisory