gVectors Team wpForo Forum

• CVE-2026-28562 High 8.2 wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter 0.5%
• CVE-2026-28561 Medium 5.5 wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates 0.3%
• CVE-2026-28560 Medium 5.5 wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script 0.3%
• CVE-2026-28559 Medium 5.3 wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed 0.4%
• CVE-2026-28558 Medium 6.4 wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload 0.2%
• CVE-2026-28557 Medium 6.5 wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization Handler 0.3%
• CVE-2026-28556 Medium 5.4 wpForo Forum 2.4.14 Missing Authorization via Topic Management Form Handlers 0.2%
• CVE-2026-28555 Medium 4.3 wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX Handler 0.3%
• CVE-2026-28554 Medium 4.3 wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler 0.3%
• CVE-2023-47869 Medium 4.3 WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability 0.3%
• CVE-2024-43289 High 7.5 WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability 0.4%
• CVE-2024-43288 Medium 4.3 WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability 0.3%
• CVE-2022-38055 Medium 4.3 WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability 0.3%
• CVE-2023-47870 High 7.1 WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF) 0.3%
• CVE-2023-47872 Medium 6.5 WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS) 0.4%
• CVE-2021-24406 Unrated wpForo Forum < 1.9.7 - Open Redirect 2.9%