agentprime: tomdever-wpforo-forumEvery new CVE for tomdever-wpforo-forum.https://agentprime.io/CVE-2026-93747: wpForo Forum <= 3.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'telegram' Profile Fieldhttps://agentprime.io/advisories/CVE-2026-93747/https://agentprime.io/advisories/CVE-2026-93747/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 07:40:24 GMTCVECVE-2026-93772: WordPress wpForo Forum plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-93772/https://agentprime.io/advisories/CVE-2026-93772/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 18:14:18 GMTCVECVE-2026-91092: wpForo Forum <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Guest Post Takeover via wpforo_post_edit Action / Forged comment_author_email Cookiehttps://agentprime.io/advisories/CVE-2026-91092/https://agentprime.io/advisories/CVE-2026-91092/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 07:41:13 GMTCVECVE-2026-5097: wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameterhttps://agentprime.io/advisories/CVE-2026-5097/https://agentprime.io/advisories/CVE-2026-5097/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 06:39:50 GMTCVECVE-2026-15021: wpForo Forum <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'location' Profile Fieldhttps://agentprime.io/advisories/CVE-2026-15021/https://agentprime.io/advisories/CVE-2026-15021/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 08:26:50 GMTCVECVE-2026-57636: WordPress wpForo Forum plugin <= 3.0.9 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-57636/https://agentprime.io/advisories/CVE-2026-57636/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 14:53:13 GMTCVECVE-2026-49767: WordPress wpForo Forum plugin <= 3.1.0 - Broken Authentication vulnerabilityhttps://agentprime.io/advisories/CVE-2026-49767/https://agentprime.io/advisories/CVE-2026-49767/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jun 2026 09:51:27 GMTCVEcriticalCVE-2026-49769: WordPress wpForo Forum plugin <= 3.1.0 - PHP Object Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-49769/https://agentprime.io/advisories/CVE-2026-49769/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 20:19:25 GMTCVEcriticalCVE-2026-40798: WordPress wpForo Forum plugin <= 3.0.4 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-40798/https://agentprime.io/advisories/CVE-2026-40798/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 20:18:30 GMTCVEcriticalCVE-2026-40767: WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-40767/https://agentprime.io/advisories/CVE-2026-40767/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 20:18:15 GMTCVECVE-2026-42682: WordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42682/https://agentprime.io/advisories/CVE-2026-42682/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 14:47:08 GMTCVEcriticalCVE-2026-6248: wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Pathhttps://agentprime.io/advisories/CVE-2026-6248/https://agentprime.io/advisories/CVE-2026-6248/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 18:31:33 GMTCVECVE-2026-4666: wpForo Forum <= 2.4.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Forum Post Modification via 'guestposting' Parameterhttps://agentprime.io/advisories/CVE-2026-4666/https://agentprime.io/advisories/CVE-2026-4666/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 02:25:04 GMTCVECVE-2026-5809: wpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameterhttps://agentprime.io/advisories/CVE-2026-5809/https://agentprime.io/advisories/CVE-2026-5809/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Apr 2026 07:40:15 GMTCVECVE-2026-3666: wpForo Forum <= 2.4.16 - Authenticated (Subscriber+) Arbitrary File Deletion via Post Bodyhttps://agentprime.io/advisories/CVE-2026-3666/https://agentprime.io/advisories/CVE-2026-3666/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Apr 2026 11:16:17 GMTCVECVE-2026-1581: wpForo Forum <= 2.4.14 - Unauthenticated Time-Based SQL Injectionhttps://agentprime.io/advisories/CVE-2026-1581/https://agentprime.io/advisories/CVE-2026-1581/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 16:24:55 GMTCVECVE-2026-0910: wpForo Forum <= 2.4.13 - Authenticated (Subscriber+) PHP Object Injectionhttps://agentprime.io/advisories/CVE-2026-0910/https://agentprime.io/advisories/CVE-2026-0910/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 13:25:44 GMTCVECVE-2025-66070: WordPress wpForo Forum plugin <= 2.4.10 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2025-66070/https://agentprime.io/advisories/CVE-2025-66070/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 07:22:17 GMTCVECVE-2025-13126: wpForo Forum <= 2.4.12 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2025-13126/https://agentprime.io/advisories/CVE-2025-13126/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Dec 2025 04:20:40 GMTCVECVE-2025-11740: wpForo Forum <= 2.4.9 - Authenticated (Susbscriber+) SQL Injectionhttps://agentprime.io/advisories/CVE-2025-11740/https://agentprime.io/advisories/CVE-2025-11740/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Nov 2025 05:40:24 GMTCVECVE-2025-4203: wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Functionhttps://agentprime.io/advisories/CVE-2025-4203/https://agentprime.io/advisories/CVE-2025-4203/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Oct 2025 06:49:24 GMTCVECVE-2025-58597: WordPress wpForo Forum Plugin <= 2.4.6 - Insecure Direct Object References (IDOR) Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-58597/https://agentprime.io/advisories/CVE-2025-58597/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Sep 2025 14:36:37 GMTCVECVE-2025-4406: wpForo Forum <= 2.4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Avatarhttps://agentprime.io/advisories/CVE-2025-4406/https://agentprime.io/advisories/CVE-2025-4406/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 01:43:43 GMTCVECVE-2025-31420: WordPress wpForo Forum plugin <= 2.4.2 - Privilege Escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2025-31420/https://agentprime.io/advisories/CVE-2025-31420/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Apr 2025 13:00:13 GMTCVECVE-2025-0764: wpForo Forum <= 2.4.1 - Authenticated (Subscriber+) Arbitrary File Read in updatehttps://agentprime.io/advisories/CVE-2025-0764/https://agentprime.io/advisories/CVE-2025-0764/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Feb 2025 07:03:46 GMTCVECVE-2024-3200: wpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injectionhttps://agentprime.io/advisories/CVE-2024-3200/https://agentprime.io/advisories/CVE-2024-3200/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Jun 2024 08:38:57 GMTCVEcriticalCVE-2023-2249: wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contentshttps://agentprime.io/advisories/CVE-2023-2249/https://agentprime.io/advisories/CVE-2023-2249/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.61 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:21 GMTCVEcritical