Skip to contentGvectors Wpforo Forum vulnerabilities
- gvectors wpforo forumwpForo Forum 2.4.14 SQL Injection via Topics ORDER BY ParameterCVE-2026-285628.8 High
- gvectors wpforo forumwpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in TemplatesCVE-2026-285614.8 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline ScriptCVE-2026-285604.8 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Information Disclosure via Global RSS FeedCVE-2026-285596.9 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Stored XSS via SVG Avatar File UploadCVE-2026-285585.1 Medium
- gvectors wpforo forumwpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization HandlerCVE-2026-285577.1 High
- gvectors wpforo forumwpForo Forum 2.4.14 Missing Authorization via Topic Management Form HandlersCVE-2026-285565.3 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX HandlerCVE-2026-285555.3 Medium
- gvectors wpforo forumwpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX HandlerCVE-2026-285545.3 Medium
- gvectors wpforo forumwpForo Forum <= 2.4.1 - Authenticated (Subscriber+) Arbitrary File Read in updateCVE-2025-07646.5 Medium
- gvectors wpforo forumWordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerabilityCVE-2023-478694.3 Medium
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerabilityCVE-2024-432897.5 High
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-432884.3 Medium
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerabilityCVE-2022-380554.3 Medium
- gvectors wpforo forumwpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL InjectionCVE-2024-32009.9 Critical
- gvectors wpforo forum, wpforo forum +1 moreWordPress wpForo plugin <= 2.2.3 - Privilege Escalation vulnerabilityCVE-2023-478687.3 High
- gvectors wpforo forumWordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF)CVE-2023-478707.1 High
- gvectors wpforo forumWordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-478726.5 Medium
- gvectors wpforo forumwpForo Forum < 2.1.9 - Reflected Cross-Site ScriptingCVE-2023-23096.1 Medium
- gvectors wpforo forumwpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contentsCVE-2023-2249EPSS 60.8%8.8 High
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-401927.1 High
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerabilityCVE-2022-402009.9 Critical
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerabilityCVE-2022-402066.3 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerabilityCVE-2022-402055.4 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-406325.4 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-381448.8 High
- gvectors wpforo forumwpForo Forum < 1.9.7 - Open RedirectCVE-2021-244066.1 Medium
- gvectors wpforo forumAn issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for...CVE-2018-166139.8 Critical
- gvectors wpforo forumwpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for...CVE-2018-117096.1 Medium