Description
Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tomdever | wpForo Forum | < 3.0.2 | 3.0.2 |
High · 7.5
CVE-2026-40767
EUVD-2026-36977GHSA-67cg-j2qq-7wv4
WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability
Published Jun 15, 2026 · Updated Jun 15, 2026 · Assigned by Patchstack