CVE-2026-107765

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website userurl field. This is due to insufficient output escaping in the ctdbfiltercommentauthorname callback hooked to...

CVE-2026-107765

The Discussion Board – WordPress Forum Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.6.0 . The flaw exists in the user profile Website (user_url) field due to insufficient output escaping in the ctdb_filter_comment_author_name() callback...

CVE-2026-107765 Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website userurl field. This is due to insufficient output escaping in the ctdbfiltercommentauthorname callback hooked to...

EUVD-2026-114602

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website userurl field. This is due to insufficient output escaping in the ctdbfiltercommentauthorname callback hooked to...

CVE-2026-107765: marketingfire Discussion Board – WordPress Forum Plugin: The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in…

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website userurl field. This is due to insufficient output escaping in the ctdbfiltercommentauthorname callback hooked to...

CVE-2026-115957

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

CVE-2026-115957 WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

CVE-2026-115957

The WP Discussion Board WordPress plugin (versions up to and including 2.6.0 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw. This issue stems from the improper neutralization of input during web page generation. While specific technical details regarding the affected functions or fil...

EUVD-2026-112063

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

PT-2026-128241

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0...

WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin WP Discussion Board versions = 2.6.0...

CVE-2026-115958

Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0...

CVE-2026-115958 WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0...

EUVD-2026-109709

Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0...

CVE-2026-115958

The WP Discussion Board WordPress plugin (versions

CVE-2026-115958 WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0...

WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WP Discussion Board versions = 2.6.0...

PT-2026-123241

Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0...

CVE-2025-13746: Improper Neutralization of Input During Web Page Generation

The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User's Display Name in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-69023

Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Discussion Board: from n/a through = 2.5.7...