Stored Cross-Site Scripting Vulnerability in ForumWP Plugin for WordPress

CVE-2025-13746

What is CVE-2025-13746?

The ForumWP – Forum & Discussion Board plugin for WordPress is subject to a vulnerability due to improper input validation and output escaping. This issue allows authenticated users with Subscriber-level access and higher to embed malicious scripts through the User's Display Name. Once the script is injected, it will execute whenever other users visit the affected pages, potentially compromising their session data and web security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References