CVE-2022-40632: WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-40632.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.'

Q: What is the severity of CVE-2022-40632?

The severity of CVE-2022-40632 is medium (5.4).

Q: Which software versions are affected by this vulnerability?

The gVectors Team wpForo Forum plugin versions <= 2.0.5 on WordPress are affected by this vulnerability.

Q: How can this vulnerability be exploited?

This vulnerability can be exploited through Cross-Site Request Forgery (CSRF) attacks, leading to topic deletion on the wpForo Forum plugin.

Published Nov 8, 2022

Updated

Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.

Affected Software

1 affected component

gVectors Wpforo Forum Wordpress<=2.0.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress wpForo Forum plugin to a version that resolves this vulnerability.
Fixed in 2.0.6

Event History

Nov 8, 2022

CVE Published

via MITRE·06:23 PM

Data Sourced

via MITRE·06:23 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-40632.

What is the title of this vulnerability?

The title of this vulnerability is 'Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.'

What is the severity of CVE-2022-40632?

The severity of CVE-2022-40632 is medium (5.4).

Which software versions are affected by this vulnerability?