CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-43289

WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability

Status: Published
Published: 2024-08-26
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gVectors Team wpForo Forum

Default version status: unaffected

n/a to ≤ 2.3.4affected

References

https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-3-4-unauthenticated-sensitive-data-exposure-vulnerability?_s_id=cve ↗