tomdever wpForo Forum vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20258
4. 202617

Newest CVEs

• CVE-2026-93747

  wpForo Forum <= 3.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'telegram' Profile Field

  tomdever · wpForo Forum

  Medium6.4
• CVE-2026-93772

  WordPress wpForo Forum plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability

  Tomdever · wpForo Forum

  Medium6.5
• CVE-2026-91092

  wpForo Forum <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Guest Post Takeover via wpforo_post_edit Action / Forged comment_author_email Cookie

  tomdever · wpForo Forum

  Medium4.3
• CVE-2026-5097

  wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter

  tomdever · wpForo Forum

  High7.5
• CVE-2026-15021

  wpForo Forum <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'location' Profile Field

  tomdever · wpForo Forum

  Medium6.4
• CVE-2026-57636

  WordPress wpForo Forum plugin <= 3.0.9 - SQL Injection vulnerability

  Tomdever · wpForo Forum

  High8.5
• CVE-2026-49767

  WordPress wpForo Forum plugin <= 3.1.0 - Broken Authentication vulnerability

  Tomdever · wpForo Forum

  Critical9.8
• CVE-2026-49769

  WordPress wpForo Forum plugin <= 3.1.0 - PHP Object Injection vulnerability

  Tomdever · wpForo Forum

  Critical9.8
• CVE-2026-40798

  WordPress wpForo Forum plugin <= 3.0.4 - SQL Injection vulnerability

  Tomdever · wpForo Forum

  Critical9.3
• CVE-2026-40767

  WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability

  Tomdever · wpForo Forum

  High7.5