Plugin icon

ForumWP – Forum & Discussion Board

forumwp

Vulnerabilities:

6

Last Updated:

April 1, 2026

Active Installs:

900

Published
Title
Fixed in
CVSS
Published
2026-01-05
Title
ForumWP – Forum & Discussion Board < 2.1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name
Fixed in
Fixed in 2.1.7
CVSS
6.4 (medium)
Published
2025-11-21
Title
ForumWP < 2.1.5 - Missing Authorization
Fixed in
Fixed in 2.1.5
CVSS
4.3 (medium)
Published
2024-12-11
Title
ForumWP < 2.1.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 2.1.1
CVSS
9.8 (critical)
Published
2024-12-05
Title
ForumWP < 2.1.3 - Reflected Cross-Site Scripting via url Parameter
Fixed in
Fixed in 2.1.3
CVSS
7.1 (high)
Published
2024-12-05
Title
ForumWP < 2.1.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.1.3
CVSS
7.1 (high)
Published
2024-09-06
Title
ForumWP – Forum & Discussion Board Plugin < 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Fixed in
Fixed in 2.1.0
CVSS
8.8 (high)