PT-2018-10631

Name of the Vulnerable Software and Affected Versions wpForo plugin versions prior to 2018-02-05 Description The issue allows for SQL Injection via a search with the /forum/ endpoint and the wpfo parameter. Recommendations For versions prior to 2018-02-05, update to a version released after...

CVE-2018-11515: Improper Neutralization of Special Elements used in an SQL Command

The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter...