Skip to contentGvectors Team Wpforo Forum vulnerabilities
- gvectors wpforo forumwpForo Forum 2.4.14 SQL Injection via Topics ORDER BY ParameterCVE-2026-285628.8 High
- gvectors wpforo forumwpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in TemplatesCVE-2026-285614.8 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline ScriptCVE-2026-285604.8 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Information Disclosure via Global RSS FeedCVE-2026-285596.9 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Stored XSS via SVG Avatar File UploadCVE-2026-285585.1 Medium
- gvectors wpforo forumwpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization HandlerCVE-2026-285577.1 High
- gvectors wpforo forumwpForo Forum 2.4.14 Missing Authorization via Topic Management Form HandlersCVE-2026-285565.3 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX HandlerCVE-2026-285555.3 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX HandlerCVE-2026-285545.3 Medium
- gvectors wpforo forumWordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerabilityCVE-2023-478694.3 Medium
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerabilityCVE-2024-432897.5 High
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-432884.3 Medium
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerabilityCVE-2022-380554.3 Medium
- gvectors wpforo forumWordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF)CVE-2023-478707.1 High
- gvectors wpforo forumWordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-478726.5 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-401927.1 High
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerabilityCVE-2022-402009.9 Critical
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerabilityCVE-2022-402066.3 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerabilityCVE-2022-402055.4 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-406325.4 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-381448.8 High
- gvectors wpforo forumwpForo Forum < 1.9.7 - Open RedirectCVE-2021-244066.1 Medium