wpForo Forum vulnerabilities
We track 1 vulnerability in wpForo Forum products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest wpForo Forum vulnerabilities
- 7.5 High severity
wpForo Forum: Deserialization of Untrusted Data
The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object. No POP chai