CVE-2026-119155

The wpForo Forum plugin for WordPress (versions up to and including 3.2.2 ) is vulnerable to a time-based SQL Injection . The root cause is insufficient escaping and a lack of sufficient preparation on the 'href[locale]' parameter in existing SQL queries. This flaw allows unauthenticated attacker...