Privilege Escalation Vulnerability in wpForo Forum Plugin for WordPress

CVE-2026-119164

What is CVE-2026-119164?

The wpForo Forum plugin for WordPress is affected by a privilege escalation vulnerability due to a type-confusion flaw in the authorization guard for the secondary_groupids parameter in the wpforo_action_profile_update POST handler. This issue arises when an authenticated user, including those with only Subscriber-level access, can bypass the security checks intended to prevent unauthorized privilege modifications. Specifically, by manipulating the data[secondary_groupids] parameter, attackers can inject Admin group IDs, thereby escalating their access to that of a wpForo Administrator. This allows them to access the Forum Accesses editor and modify capability policies across the forum, along with the ability to edit content contributed by other users. To exploit this vulnerability, an attacker must have at least three existing approved posts in the wpForo system and must also provide a valid nonce from their account profile.

References