#wpForo
LightNews LightNews
2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy
wpForo + wpForo Advanced Attachments <= 3.1.3 - Unauthenticated Stored Cross-... The wpForo + ...

https://cve.threatint.eu/CVE/CVE-2025-4224?utm_campaign=info&utm;_medium=rss&utm;_source=website

Result Details
CVE-2025-4224 | THREATINT
The wpForo + wpForo Advanced Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload names in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated at...
cve.threatint.eu
June 3, 2025 at 3:17 AM
cve.skyfleet.blue
CVE-2025-4224 - WordPress wpForo Advanced Attachments Stored Cross-Site Scripting Vulnerability
CVE ID : CVE-2025-4224

Published : June 3, 2025, 3:15 a.m. | 1 hour, 14 minutes ago

Description : The wpForo + wpForo Advanced Attachments plugin for WordPress is vulnerable t...
CVE-2025-4224 - WordPress wpForo Advanced Attachments Stored Cross-Site Scripting Vulnerability
The wpForo + wpForo Advanced Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload names in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level access and above, to inject arbitrary …
cvefeed.io
June 3, 2025 at 4:32 AM
wbcomdesigns.bsky.social
Turn your LMS into a social learning hub! 🎓💬
LearnDash wpForo links courses with interactive forums for discussions, questions & peer support.

🔗 bit.ly/4aPlQyp

#LearnDash #wpForo #WordPressLMS #ELearningCommunity
December 8, 2025 at 3:00 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-31420 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-31420

Tomdever - wpForo Forum

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-31420
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
April 4, 2025 at 2:09 PM
securitycipher.bsky.social
CVE-2025–31420: wpForo <= 2.4.2 — Authenticated Privilege Escalation

https://revan-ar.medium.com/cve-2025-31420-wpforo-2-4-2-authenticated-privilege-escalation-99b1aa7498b6?source=rss------bug_bounty-5
April 7, 2025 at 5:09 AM
2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy
wpForo Forum <= 2.4.12 - Unauthenticated SQL InjectionThe wpForo Forum plugin... The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the `post_args` and `topic_args`...

Origin | Interest | Match
CVE-2025-13126 | THREATINT
CVE-2025-13126: The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the `post_args` and `topic_args` parameters in all versions up to, and including, 2.4.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparat...
cve.threatint.eu
December 14, 2025 at 5:20 AM
cve-notifications.bsky.social
ID: CVE-2024-43289
CVSS V3.1: HIGH
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4.
#security #infosec #cve-alert
nvd.nist.gov
August 26, 2024 at 4:15 PM
parigotmanchot.mastodon.social.ap.brid.gy
@cheziceman Vu que le reCaptcha v2 est passé par certains bots sur le forum wpForo, je n'avais plus de doutes à ce sujet.
Deux contre-mesures efficaces :
- modération à priori pour les non-inscrits + validation des inscriptions par modération
- authentification multi factorielle
L'humain sera […]
Original post on mastodon.social
mastodon.social
September 28, 2024 at 7:51 AM
functionalprogramming.activitypub.awakari.com.ap.brid.gy
wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Functio... The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the get_memb...

Origin | Interest | Match
CVE-2025-4203 | THREATINT
CVE-2025-4203: The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the get_members() function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'row_count' parameters. The function b...
cve.threatint.eu
October 25, 2025 at 9:17 AM
cve-notifications.bsky.social
ID: CVE-2022-38055
CVSS V3.1: MEDIUM
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Content Spoofing.This issue affects wpForo Forum: from n/a through 2.0.9.
#security #infosec #cve-alert
nvd.nist.gov
June 21, 2024 at 4:15 PM
pss-for-wp.bsky.social
The wpForo Forum plugin for WordPress was graded with the Plugin Security Scorecard and got a D.
Security Scorecard for wpForo Forum Plugin for WordPress
The wpForo Forum plugin for WordPress has a security grade of D.
www.pluginvulnerabilities.com
May 6, 2025 at 8:21 PM
wbcomdesigns.bsky.social
🎉 BuddyX Theme v4.9.1 Released!
Now with better FluentCart integration, improved UI, and LearnDash + wpForo compatibility fixes.

🔗 wbcomdesigns.com/cha...

#WordPress #ThemeUpdate #BuddyXTheme #WbcomDesigns
October 30, 2025 at 5:00 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-66070 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-66070

Tomdever - wpForo Forum

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-66070
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
December 18, 2025 at 8:09 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-4406 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-4406

tomdever - wpForo Forum

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-4406
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
July 10, 2025 at 1:53 AM
cve-notifications.bsky.social
ID: CVE-2024-43288
CVSS V3.1: MEDIUM
Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4.
#security #infosec #cve-alert
nvd.nist.gov
August 18, 2024 at 10:16 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-13126 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-13126

tomdever - wpForo Forum

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-13126
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
December 14, 2025 at 4:51 AM
offseq.bsky.social
wpForo Forum plugin for WordPress (≤2.4.12) hit by HIGH severity SQL Injection flaw—unauthenticated attackers can steal forum data. No patch yet: use WAF & input validation. Details: https://radar.offseq.com/threat/cve-2025-13126-cwe-89-improper-neutralization-of-s-ffb42f94 #OffSeq #WordPress #SQ...
Security threat visualization
December 14, 2025 at 5:33 AM
cve.skyfleet.blue
CVE-2025-66070 - WordPress wpForo Forum plugin
CVE ID : CVE-2025-66070

Published : Dec. 18, 2025, 8:16 a.m. | 52 minutes ago

Description : Missing Authorization vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security...
CVE-2025-66070 - WordPress wpForo Forum plugin <= 2.4.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpForo Forum: from n/a through
cvefeed.io
December 18, 2025 at 9:16 AM
cve.skyfleet.blue
CVE-2025-13126 - wpForo Forum
CVE ID : CVE-2025-13126

Published : Dec. 14, 2025, 5:15 a.m. | 1 hour, 52 minutes ago

Description : The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the `post_args` and `topic_args` parameters in all versions ...
CVE-2025-13126 - wpForo Forum <= 2.4.12 - Unauthenticated SQL Injection
The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the `post_args` and `topic_args` parameters in all versions up to, and including, 2.4.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for …
cvefeed.io
December 14, 2025 at 7:27 AM
wbcomdesigns.bsky.social
Transform your WordPress LMS with LearnDash wpForo!
Discover more: https://wbcomdesigns.com/downloads/learndash-wpforo/

Elevate Your E-Learning Experience with seamlessly integrating forums into your courses.

#LearnDash #wpForo #eLearning #SocialLearning #Engagement #OnlineEducation
April 26, 2024 at 3:00 AM
offseq.bsky.social
wpForo Forum plugin (≤2.4.8) hit with HIGH severity SQL Injection (CVE-2025-4203). Unauthenticated exploit: data at risk. Update ASAP, use WAF to block malicious input. https://radar.offseq.com/threat/cve-2025-4203-cwe-89-improper-neutralization-of-sp-fb9d1208 #OffSeq #WordPress #SQLInjection
Security threat visualization
October 26, 2025 at 10:31 AM