Log in Start free

gVectors Team

Products

ProductCVEsExploitedLatest
wpForo Forum16–Feb 28, 2026
wpForo Forum (WordPress plugin)6–Nov 17, 2022
Comments – wpDiscuz4–Feb 1, 2024
Comments – wpDiscuz (WordPress plugin)2–Nov 18, 2022
WooDiscuz – WooCommerce Comments2–Dec 18, 2023
wpDiscuz2–Jun 8, 2024

Exploited and recent CVEs

  • CVE-2026-28562 High 8.2 wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter 0.5%
  • CVE-2026-28561 Medium 5.5 wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates 0.3%
  • CVE-2026-28560 Medium 5.5 wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script 0.3%
  • CVE-2026-28559 Medium 5.3 wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed 0.4%
  • CVE-2026-28558 Medium 6.4 wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload 0.2%
  • CVE-2026-28557 Medium 6.5 wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization Handler 0.3%
  • CVE-2026-28556 Medium 5.4 wpForo Forum 2.4.14 Missing Authorization via Topic Management Form Handlers 0.2%
  • CVE-2026-28555 Medium 4.3 wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX Handler 0.3%
  • CVE-2026-28554 Medium 4.3 wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler 0.3%
  • CVE-2023-47869 Medium 4.3 WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability 0.3%
  • CVE-2024-43289 High 7.5 WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-43288 Medium 4.3 WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2022-38055 Medium 4.3 WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability 0.3%
  • CVE-2024-35681 Medium 6.5 WordPress wpDiscuz plugin <= 7.6.18 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-46310 Medium 5.3 WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability 0.3%
  • CVE-2023-51691 Medium 5.9 WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-46311 Low 2.7 WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR) 0.5%
  • CVE-2023-49759 Medium 5.4 WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-47870 High 7.1 WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-47872 Medium 6.5 WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-47775 Medium 4.3 WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-47185 High 7.1 WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-33216 Medium 5.9 WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.2.9 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-43492 Medium 4.3 WordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerability 0.7%
  • CVE-2022-40192 High 7.1 WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability 0.5%
  • CVE-2022-40200 Critical 9.9 WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability 1.0%
  • CVE-2022-40206 Medium 6.3 WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability 0.6%
  • CVE-2022-40205 Medium 5.4 WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability 0.6%
  • CVE-2022-40632 Medium 5.4 WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability 0.3%
  • CVE-2022-38144 High 8.8 WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability 0.5%