Lucene search
+L

7907 matches found

OSV
OSV
•added 2022/11/08 7:15 p.m.•12 views

CVE-2022-40632

Cross-Site Request Forgery CSRF vulnerability in gVectors Team wpForo Forum plugin = 2.0.5 on WordPress leading to topic deletion...

5.4CVSS5.8AI score0.00276EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/08 7:15 p.m.•33 views

CVE-2022-40206

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public...

6.3CVSS0.00495EPSS
SaveExploits0References2
OSV
OSV
•added 2022/11/08 7:15 p.m.•14 views

CVE-2022-40206

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public...

4.3CVSS5.8AI score0.00495EPSS
SaveExploits0References2
OSV
OSV
•added 2022/11/08 7:15 p.m.•18 views

CVE-2022-40205

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved...

4.3CVSS5.8AI score0.00527EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/08 7:15 p.m.•21 views

CVE-2022-40205

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved...

5.4CVSS0.00527EPSS
SaveExploits0References2
Prion
Prion
•added 2022/11/08 7:15 p.m.•30 views

Spoofing

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public...

4CVSS4.6AI score0.00495EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/11/08 7:15 p.m.•31 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in gVectors Team wpForo Forum plugin = 2.0.5 on WordPress leading to topic deletion...

5.8CVSS5.5AI score0.00276EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/11/08 7:15 p.m.•23 views

Spoofing

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved...

4CVSS4.6AI score0.00527EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/11/08 6:31 p.m.•39 views

CVE-2022-40206 WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public...

6.3CVSS6.5AI score0.00495EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/11/08 6:31 p.m.•14 views

CVE-2022-40206 WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public...

6.3CVSS6.2AI score0.00495EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/08 6:31 p.m.•87 views

CVE-2022-40206

Summary (CVE-2022-40206) Insecure Direct Object References (IDOR) in the WordPress wpForo Forum plugin &lt;= 2.0.5. Affected component: wpForo Forum plugin for WordPress. Root cause: IDOR allows users with subscriber or higher roles to change a forum post’s visibility to private/public. Impact: e...

6.3CVSS5.6AI score0.00495EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/08 6:26 p.m.•11 views

CVE-2022-40205 WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved...

5.4CVSS5.4AI score0.00527EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/08 6:26 p.m.•94 views

CVE-2022-40205

The CVE-2022-40205 vulnerability concerns the WordPress wpForo Forum plugin, versions = 2.0.6) to resolve the issue.

5.4CVSS5.6AI score0.00527EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/11/08 6:26 p.m.•33 views

CVE-2022-40205 WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved...

5.4CVSS5.7AI score0.00527EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/08 6:23 p.m.•28 views

CVE-2022-40632 WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in gVectors Team wpForo Forum plugin = 2.0.5 on WordPress leading to topic deletion...

5.4CVSS5.8AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/08 6:23 p.m.•90 views

CVE-2022-40632

CVE-2022-40632 details a Cross-Site Request Forgery (CSRF) in the gVectors Team wpForo Forum plugin for WordPress, version

5.4CVSS5.5AI score0.00276EPSS
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
•added 2022/11/08 5:13 p.m.•8 views

keyboardforum.rolandmusik.de Cross Site Scripting vulnerability OBB-3044368

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/11/08 12:00 a.m.•17 views

PT-2022-25430 · Gvectors Team · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: gVectors Team wpForo Forum plugin versions = 2.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that can lead to topic deletion. This occurs in the gVectors Team wpForo Forum plugin on WordPress. Recommendations:...

5.4CVSS5.5AI score0.00276EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/11/08 12:00 a.m.•19 views

PT-2022-25283 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum plugin versions = 2.0.5 Description: The issue is related to an insecure direct object references IDOR vulnerability. This vulnerability allows attackers with subscriber or higher user roles to mark any forum post as private or...

6.3CVSS4.4AI score0.00495EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/08 12:00 a.m.•2 views

CVE-2022-40206: Authorization Bypass Through User-Controlled Key

Insecure direct object references IDOR vulnerability in the wpForo Forum plugin = 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public...

6.3CVSS5.8AI score0.00495EPSS
SaveExploits0References3
Rows per page
Query Builder