CVE-2022-31294

CVE-2022-31294 Online Discussion Forum Site 1.0 - Account Takeover Exploit Title: Online Discussion Forum Site 1.0 - CSRF Create New/Update Existing Admin User Account Takeover Date: 2022-06-13 CVE: CVE-2022-31294 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage:...

CVE-2022-31295

CVE-2022-31295 Online Discussion Forum Site 1.0 - IDOR / Delete any post Exploit Title: Online Discussion Forum Site 1.0 - IDOR / Delete any post Date: 2022-06-13 CVE: CVE-2022-31295 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2022-31296

CVE-2022-31296 Online Discussion Forum Site 1.0 - Blind SQL Injection Exploit Title: Online Discussion Forum Site 1.0 - Blind SQL Injection Date: 2022-06-13 CVE: CVE-2022-31296 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2026-107765

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website userurl field. This is due to insufficient output escaping in the ctdbfiltercommentauthorname callback hooked to...

CVE-2026-107765 Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website userurl field. This is due to insufficient output escaping in the ctdbfiltercommentauthorname callback hooked to...

CVE-2026-107765 Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website userurl field. This is due to insufficient output escaping in the ctdbfiltercommentauthorname callback hooked to...

EUVD-2026-114602

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website userurl field. This is due to insufficient output escaping in the ctdbfiltercommentauthorname callback hooked to...

CVE-2026-107765

The Discussion Board – WordPress Forum Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.6.0 . The flaw exists in the user profile Website (user_url) field due to insufficient output escaping in the ctdb_filter_comment_author_name() callback...

CVE-2026-107765: marketingfire Discussion Board – WordPress Forum Plugin: The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in…

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website userurl field. This is due to insufficient output escaping in the ctdbfiltercommentauthorname callback hooked to...

PT-2026-134440

Name of the Vulnerable Software and Affected Versions Discussion Board – WordPress Forum Plugin versions prior to 2.6.1 Description Stored Cross-Site Scripting occurs via the user profile Website user url field. The issue stems from insufficient output escaping in the ctdb filter comment author...

CVE-2026-115957

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

EUVD-2026-112063

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

CVE-2026-115957 WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

CVE-2026-115957

The WP Discussion Board WordPress plugin (versions up to and including 2.6.0 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw. This issue stems from the improper neutralization of input during web page generation. While specific technical details regarding the affected functions or fil...

CVE-2026-115957 WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

WordPress Discussion Board Cross-site Scripting Vulnerability

WordPress Discussion Board versions 2.6.0 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

CVE-2026-115957: WP Discussion Board: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Discussion…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

PT-2026-128241

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin WP Discussion Board versions = 2.6.0...

CVE-2026-115958

Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0...