gVectors Team vulnerabilities
We track 4 vulnerabilities in gVectors Team products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 28, 2026.
Latest gVectors Team vulnerabilities
- 9.8 Critical severity
wpForo Forum: Improper Neutralization of Special Elements used in an SQL Command
wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers exploit the wpfob parameter with CASE WHEN payloads to perfo
- 7.5 High severity
wpForo Forum: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4.
- 8.8 High severity
WooDiscuz – WooCommerce Comments: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.3.0.
- 8.8 High severity
wpForo Forum: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross Site Request Forgery, Accessing Functionality Not Properly Constrained by ACLs leading to forced all users log out.This issue affects wpFor