CVE-2026-80513

The wpForo Forum WordPress plugin version before 3.1.6 is vulnerable to a PHP Object Injection due to the failure to restrict classes during the deserialization of user-supplied profile field values. This vulnerability impacts authenticated users with Subscriber-level access and above. While the ...