CVE-2023-47869 WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability

🗓️ 09 Dec 2024 11:34:30Reported by PatchstackType

CVE-2023-47869 WordPress wpForo plugin has Broken Access Control and CSRF vulnerabilities in versions 2.2.5.

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2023-47869 WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability	9 Dec 202411:30	–	cvelist
Patchstack	WordPress wpForo Forum Plugin <= 2.2.5 is vulnerable to Content Injection	20 Nov 202300:00	–	patchstack
WPVulnDB	wpForo Forum < 2.2.6 - Subscriber+ Content Injection	29 Nov 202300:00	–	wpvulndb
CVE	CVE-2023-47869	9 Dec 202413:15	–	cve
NVD	CVE-2023-47869	9 Dec 202413:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 20, 2023 to November 26, 2023)	30 Nov 202315:31	–	wordfence

Source	Link
patchstack	www.patchstack.com/database/wordpress/plugin/wpforo/vulnerability/wordpress-wpforo-plugin-2-2-3-broken-access-control-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Dec 2024 11:30Current

6.9Medium risk

Vulners AI Score6.9

CVSS34.3

EPSS0.0004

SSVC

CWE-80