Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-47870

WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Cross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross Site Request Forgery, Accessing Functionality Not Properly Constrained by ACLs leading to forced all users log out.This issue affects wpForo Forum: from n/a through 2.2.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gVectors Team wpForo Forum

Default version status: unaffected

  • n/a to ≤ 2.2.6affected

References