CVE-2018-16613: Critical severity gvectors team wpforo forum vulnerability
An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privilege to the forum administrator without any form of user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-16613.
What is the affected software?
The affected software is the wpForo Forum plugin before version 1.5.2 for WordPress.
What is the severity of CVE-2018-16613?
The severity of CVE-2018-16613 is rated as critical with a severity value of 9.8.
How can a registered forum escalate privilege to the forum administrator?
A registered forum can escalate privilege to the forum administrator without any user interaction.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the following links: [link1](https://github.com/9emin1/advisories), [link2](https://github.com/9emin1/advisories/blob/master/wpForo-1-5-1.md), [link3](https://wordpress.org/plugins/wpforo/#developers).