tomdever wpForo Forum vulnerabilities and fixes
Exploited and high-severity tomdever wpForo Forum vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 7.5CVE-2026-119164wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Privilege Escalation to 'data[secondary_groupids]' CSV ParameterVerify fixtomdever wpForo Forum
2 min read - 7.5CVE-2026-95870wpForo Forum <= 3.2.1 - Unauthenticated SQL Injection via 'data' ParameterVerify fixtomdever wpForo Forum
1 min read - 7.5CVE-2026-119155wpForo Forum <= 3.2.2 - Unauthenticated SQL Injection via 'href[locale]' ParameterVerify fixtomdever wpForo Forum
1 min read