| CVE-2026-80514 |
The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address…
|
5.3
Medium
|
Sep 25, 2026 |
| CVE-2026-80513 |
The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it…
|
7.5
High
|
Sep 24, 2026 |
| CVE-2026-12698 |
The wpForo Forum WordPress plugin before 3.1.3 does not restrict which profile fields a member may set when editing…
|
4.3
Medium
|
Aug 4, 2026 |
| CVE-2026-12696 |
The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it…
|
5.4
Medium
|
Aug 1, 2026 |
| CVE-2026-12697 |
The wpForo Forum WordPress plugin before 3.1.2 does not verify that an AI chat conversation belongs to the requesting…
|
5.4
Medium
|
Jul 31, 2026 |
| CVE-2023-2309 |
The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a…
|
Not rated
|
Jul 24, 2023 |