tomdever wpForo Forum vulnerabilities
32 published CVEs name tomdever wpForo Forum among the affected products.
- 32Published CVEs32 of them scored
- 24Last 12 monthspublished in the last year
- 5Critical16 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120532
wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Reply Body in Moderation Forms
tomdever · wpForo Forum
Medium6.4 - CVE-2026-95870
wpForo Forum <= 3.2.1 - Unauthenticated SQL Injection via 'data' Parameter
tomdever · wpForo Forum
High7.5 - CVE-2026-119164
wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Privilege Escalation to 'data[secondary_groupids]' CSV Parameter
tomdever · wpForo Forum
High7.5 - CVE-2026-119155
wpForo Forum <= 3.2.2 - Unauthenticated SQL Injection via 'href[locale]' Parameter
tomdever · wpForo Forum
High7.5 - CVE-2026-110004
wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal via 'theme' Parameter
tomdever · wpForo Forum
Medium6.5 - CVE-2026-93747
wpForo Forum <= 3.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'telegram' Profile Field
tomdever · wpForo Forum
Medium6.4 - CVE-2026-93772
WordPress wpForo Forum plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability
Tomdever · wpForo Forum
Medium6.5 - CVE-2026-91092
wpForo Forum <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Guest Post Takeover via wpforo_post_edit Action / Forged comment_author_email Cookie
tomdever · wpForo Forum
Medium4.3 - CVE-2026-5097
wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter
tomdever · wpForo Forum
High7.5 - CVE-2026-15021
wpForo Forum <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'location' Profile Field
tomdever · wpForo Forum
Medium6.4