MarketingFire Discussion Board – WordPress Forum Plugin

• CVE-2026-107765 Medium 6.4 Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field 0.2%
• CVE-2025-8483 Medium 6.3 Discussion Board – WordPress Forum Plugin <= 2.5.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution 0.3%