CVE-2012-6625

SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action...

PT-2014-2391

Name of the Vulnerable Software and Affected Versions ForumPress WP Forum Server plugin versions prior to 1.7.4 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the groupid parameter in an "editgroup" action or the usergroup id paramet...

PT-2014-2394

Name of the Vulnerable Software and Affected Versions ForumPress WP Forum Server plugin versions prior to 1.7.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the groupid parameter in an "editgroup" action. Recommendations For versions prior ...