WP Forum Server vulnerabilities

2 known vulnerabilities in WP Forum Server from Lucidcrew. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  WP Forum Server: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-53306Jun 27, 2025Lucidcrew

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in lucidcrew WP Forum Server forum-server allows SQL Injection.This issue affects WP Forum Server: from n/a through <= 1.8.2.

• 7.1 High severity

  WP Forum Server: Cross-Site Request Forgery

  CVE-2025-53305Jun 27, 2025Lucidcrew

  Cross-Site Request Forgery (CSRF) vulnerability in lucidcrew WP Forum Server forum-server allows Stored XSS.This issue affects WP Forum Server: from n/a through <= 1.8.2.