WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-40192

7.1HIGH

Key Information:

Vendor: Wordpress
Status: WPforo Forum (WordPress Plugin)
Vendor: CVE Published:; 17 November 2022

Summary

Cross-Site Request Forgery (CSRF) vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.

Affected Version(s)

wpForo Forum (WordPress plugin) <= 2.0.9 <= 2.0.9

References

https://patchstack.com/database/vulnerability/wpforo/word...

CVSS V3.1

Score:

7.1

Severity:

HIGH

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Nov 17, 2022
Vulnerability Reserved
Sep 27, 2022

Credit

Vulnerability discovered by dhakal_ananda (Patchstack Alliance)

.