Spoofing

2022-11-0819:15:00

PRIOn knowledge base

www.prio-n.com

spoofing

idor

vulnerability

wordpress

attackers

forum plugin

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

JSON

Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public.

CPENameOperatorVersion
wpforo_forumle2.0.5

CPE	Name	Operator	Version
	wpforo_forum	le	2.0.5

References

patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-5-insecure-direct-object-references-idor-vulnerability?_s_id=cve

wordpress.org/plugins/wpforo/