tomdever vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20258
4. 202622

Newest CVEs

• CVE-2026-120532

  wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Reply Body in Moderation Forms

  tomdever · wpForo Forum

  Medium6.4
• CVE-2026-95870

  wpForo Forum <= 3.2.1 - Unauthenticated SQL Injection via 'data' Parameter

  tomdever · wpForo Forum

  High7.5
• CVE-2026-119164

  wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Privilege Escalation to 'data[secondary_groupids]' CSV Parameter

  tomdever · wpForo Forum

  High7.5
• CVE-2026-119155

  wpForo Forum <= 3.2.2 - Unauthenticated SQL Injection via 'href[locale]' Parameter

  tomdever · wpForo Forum

  High7.5
• CVE-2026-110004

  wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal via 'theme' Parameter

  tomdever · wpForo Forum

  Medium6.5
• CVE-2026-93747

  wpForo Forum <= 3.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'telegram' Profile Field

  tomdever · wpForo Forum

  Medium6.4
• CVE-2026-93772

  WordPress wpForo Forum plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability

  Tomdever · wpForo Forum

  Medium6.5
• CVE-2026-91092

  wpForo Forum <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Guest Post Takeover via wpforo_post_edit Action / Forged comment_author_email Cookie

  tomdever · wpForo Forum

  Medium4.3
• CVE-2026-5097

  wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter

  tomdever · wpForo Forum

  High7.5
• CVE-2026-15021

  wpForo Forum <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'location' Profile Field

  tomdever · wpForo Forum

  Medium6.4