Gvectors Wpforo vulnerabilities

• gvectors wpforo forum wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter CVE-2026-28562 8.8 HighFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates CVE-2026-28561 4.8 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script CVE-2026-28560 4.8 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed CVE-2026-28559 6.9 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload CVE-2026-28558 5.1 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization Handler CVE-2026-28557 7.1 HighFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Missing Authorization via Topic Management Form Handlers CVE-2026-28556 5.3 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX Handler CVE-2026-28555 5.3 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler CVE-2026-28554 5.3 MediumFebruary 28, 2026
• gvectors wpforo + wpforo advanced attachments wpForo + wpForo Advanced Attachments <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting CVE-2025-4224 7.2 HighJune 3, 2025
• gvectors wpforo forum wpForo Forum <= 2.4.1 - Authenticated (Subscriber+) Arbitrary File Read in update CVE-2025-0764 6.5 MediumFebruary 28, 2025
• gvectors wpforo forum WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability CVE-2023-47869 4.3 MediumDecember 9, 2024
• gvectors wpforo forum WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability CVE-2024-43289 7.5 HighAugust 26, 2024
• gvectors wpforo forum WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-43288 4.3 MediumAugust 18, 2024
• gvectors wpforo forum WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability CVE-2022-38055 4.3 MediumJune 21, 2024
• gvectors wpforo forum wpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injection CVE-2024-3200 9.9 CriticalJune 1, 2024
• gvectors wpforo forum, wpforo forum +1 more WordPress wpForo plugin <= 2.2.3 - Privilege Escalation vulnerability CVE-2023-47868 7.3 HighMay 17, 2024
• gvectors wpforo forum WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF) CVE-2023-47870 7.1 HighNovember 30, 2023
• gvectors wpforo forum WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47872 6.5 MediumNovember 30, 2023
• gvectors wpforo forum wpForo Forum < 2.1.9 - Reflected Cross-Site Scripting CVE-2023-2309 6.1 MediumJuly 24, 2023
• gvectors wpforo forum wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents CVE-2023-2249 EPSS 60.8% 8.8 HighJune 9, 2023
• gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 more WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-40192 7.1 HighNovember 17, 2022
• gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 more WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability CVE-2022-40200 9.9 CriticalNovember 17, 2022
• gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 more WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability CVE-2022-40206 6.3 MediumNovember 8, 2022
• gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 more WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability CVE-2022-40205 5.4 MediumNovember 8, 2022
• gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 more WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-40632 5.4 MediumNovember 8, 2022
• gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 more WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-38144 8.8 HighSeptember 9, 2022
• gvectors wpforo forum wpForo Forum < 1.9.7 - Open Redirect CVE-2021-24406 6.1 MediumJuly 6, 2021
• gvectors wpforo The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases... CVE-2019-19111 6.1 MediumJune 15, 2020
• gvectors wpforo The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s... CVE-2019-19110 4.8 MediumJune 15, 2020
• gvectors wpforo The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF. CVE-2019-19109 8.8 HighJune 15, 2020
• gvectors wpforo The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard... CVE-2019-19112 6.1 MediumJune 15, 2020
• gvectors wpforo forum An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for... CVE-2018-16613 9.8 CriticalJune 19, 2019
• gvectors wpforo forum wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for... CVE-2018-11709 6.1 MediumJune 4, 2018
• gvectors wpforo The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum... CVE-2018-11515 9.8 CriticalMay 28, 2018