CVE-2023-2309 wpForo Forum < 2.1.9 - Reflected Cross-Site Scripting

The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a Reflected Cross-Site Scripting vulnerability...

PT-2023-18841 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum WordPress plugin versions prior to 2.1.9 Description: The issue is related to a Reflected Cross-Site Scripting vulnerability. It occurs because the plugin does not escape some request parameters while in debug mode...

WordPress Plugin wpForo Forum 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress wpForo Forum Plugin < 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Software wpForo Forum Type Plugin Vulnerable versions 2.1.9 Fixed in 2.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2309 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID f15f5dd16590 Credits Alex Sanford Required privile...

WordPress wpForo Forum Plugin <= 2.1.7 is vulnerable to Local File Inclusion

Software wpForo Forum Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-2249 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 1bcd08b1a273 Credits Hamed Required privilege Subscriber Publishe...

CVE-2023-2249

The wpForo Forum plugin for WordPress is vulnerable to Local File Include, Server-Side Request Forgery, and PHAR Deserialization in versions up to, and including, 2.1.7. This is due to the insecure use of filegetcontents without appropriate verification of the data being supplied to the function...

CVE-2023-2249

CVE-2023-2249 concerns wpForo Forum (WordPress) up to version 2.1.7. The vulnerability stems from insecure use of PHP file_get_contents, enabling Local File Inclusion, Server-Side Request Forgery, and PHAR deserialization. Authenticated attackers with minimal privileges (e.g., subscriber) can rea...

CVE-2023-2249 wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents

The wpForo Forum plugin for WordPress is vulnerable to Local File Include, Server-Side Request Forgery, and PHAR Deserialization in versions up to, and including, 2.1.7. This is due to the insecure use of filegetcontents without appropriate verification of the data being supplied to the function...

PT-2023-18541 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum plugin for WordPress versions up to, and including, 2.1.7 Description: The issue is due to the insecure use of file get contents without appropriate verification of the data being supplied to the function. This makes it possible...

WordPress Plugin wpForo Forum 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2022-40200

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40200

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40192

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40192

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

Privilege escalation

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40192 WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40192

CVE-2022-40192 concerns a Cross-Site Request Forgery (CSRF) in the WordPress wpForo Forum plugin. The vulnerability affects plugin versions

CVE-2022-40192 WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40200

The CVE CVE-2022-40200 affects the WordPress wpForo Forum plugin prior to 2.0.9. Authenticated users (subscriber+) can upload arbitrary files due to a vulnerability in the plugin, enabling potential unauthorized file writes. The issue is documented across multiple sources (NVD/NVD-derived records...