VendorsgVectorswpforo1.6.5
Vulnerabilities

gVectors wpForo 1.6.5

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2019-19109
The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.
Published 2020-06-15 · Modified
8.8EPSS 0.007
CVE-2019-19111
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.
Published 2020-06-15 · Modified
6.1EPSS 0.009
CVE-2019-19112
The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php.
Published 2020-06-15 · Modified
6.1EPSS 0.009
CVE-2019-19110
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.
Published 2020-06-15 · Modified
4.8EPSS 0.007