WordPress Plugin Vulnerabilities
wpForo Forum < 2.0.6 - Subscriber+ Forum Post Set as Solved/Unsolved via IDOR
Description
The plugin does not ensure that the forum post marked as solved/unsolved belong to the user making the request, allowing any authenticated users, such as subscriber to mark arbitrary forum post as solved/unsolved
Affects Plugins
Fixed in 2.0.6 References
CVE
Classification
Type
IDOR
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Dhakal Ananda
Verified
No
WPVDB ID
Timeline
Publicly Published
2022-09-26 (about 3 years ago)
Added
2022-11-08 (about 3 years ago)
Last Updated
2022-11-08 (about 3 years ago)
WPScan 