Product
The wpForo Forum plugin for WordPress contains an unauthenticated SQL injection vulnerability in the referer parameter, allowing attackers to execute arbitrary SQL commands for data extraction.