Plugin icon

wpForo Forum

wpforo

Vulnerabilities:

16

Last Updated:

November 21, 2023

Active Installs:

20000

Published
Title
Fixed in
Published
2023-07-03
Title
wpForo Forum < 2.1.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.1.9
Published
2023-06-12
Title
wpForo Forum < 2.1.8 - Subscriber+ Arbitrary File Read, Author+ PHAR Deserialization, and Subscriber+ Server-Side Request Forgery via file_get_contents
Fixed in
Fixed in 2.1.8
Published
2022-11-26
Title
wpForo Forum < 2.0.6 - Subscriber+ Forum Post Set as Private/Public via IDOR
Fixed in
Fixed in 2.0.6
Published
2022-11-17
Title
wpForo Forum < 2.1.0 - Arbitrary User Deletion via CSRF
Fixed in
Fixed in 2.1.0
Published
2022-11-09
Title
wpForo Forum < 2.1.0 - Subscriber+ Arbitrary File Upload
Fixed in
Fixed in 2.1.0
Published
2022-09-26
Title
wpForo Forum < 2.0.6 - Topic Deletion via CSRF
Fixed in
Fixed in 2.0.6
Published
2022-09-26
Title
wpForo Forum < 2.0.6 - Subscriber+ Forum Post Set as Solved/Unsolved via IDOR
Fixed in
Fixed in 2.0.6
Published
2022-09-08
Title
wpForo Forum < 2.0.6 - Cross-Site Request Forgery
Fixed in
Fixed in 2.0.6
Published
2021-06-14
Title
wpForo Forum < 1.9.7 - Open Redirect
Fixed in
Fixed in 1.9.7
Published
2020-05-04
Title
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via langid Parameter
Fixed in
Fixed in 1.7.0
Published
2020-05-04
Title
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via s Parameter
Fixed in
Fixed in 1.7.0
Published
2020-05-04
Title
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via User Agent
Fixed in
Fixed in 1.7.0
Published
2020-05-04
Title
wpForo < 1.7.0 - New Users Set as Admin via CSRF
Fixed in
Fixed in 1.7.0
Published
2018-09-06
Title
wpForo < 1.5.2 - Privilege Escalation
Fixed in
Fixed in 1.5.2
Published
2018-06-01
Title
wpForo Forum <= 1.4.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.4.12
Published
2018-05-27
Title
wpForo Forum <= 1.4.9 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.4.11