Vendor

WpForo

2 briefs RSS

SQL Injection Vulnerability in wpForo Forum Plugin

The wpForo Forum plugin for WordPress contains an unauthenticated SQL injection vulnerability in the referer parameter, allowing attackers to execute arbitrary SQL commands for data extraction.

wpForo Forum

1t 1c Aug 28, 2026

critical advisory

wpForo Forum Plugin Arbitrary File Deletion Vulnerability (CVE-2026-6248)

2 rules 1 TTP 1 CVE

The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion (CVE-2026-6248) due to insufficient validation and sanitization, allowing authenticated users to delete arbitrary files on the server, potentially leading to remote code execution.

wpForo Forum plugin +1 wordpress wpforo file-deletion CVE-2026-6248

2r 1t 1c Jan 23, 2024