wpforo
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 23 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 17, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →wpForo Forum < 3.1.3 - Subscriber+ Account Status and Reputation Manipulation via Profile Update Mass Assignment
wpForo Forum < 3.1.2 - Subscriber+ Stored XSS via Profile Location Field
wpForo Forum < 3.1.2 - Subscriber+ Cross-User AI Chat Message Deletion via IDOR
WordPress wpForo Forum plugin <= 3.0.9 - SQL Injection vulnerability
WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability
WordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerability
wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
wpForo Forum <= 2.4.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Forum Post Modification via 'guestposting' Parameter
wpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameter
wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script
Monitor wpforo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.