Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-02
Wp Discussion Board - Security Vulnerability (CVE-2026-107765)
The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website (user_url) field. This is due to insufficient output escaping in the ctdb_filter_comment_author_name() callback hooked to get_comment_author_link, which interpolates the raw user_url value into a single-quoted href attribute without esc_url() or esc_attr(). This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses a Discussion Board topic containing…
PLUGIN
Wp Discussion Board
CVE-2026-107765
Risk Score
Threat Entry
Updated 2026-10-26
Wp Discussion Board - Security Vulnerability (CVE-2026-115958)
Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0.
PLUGIN
Wp Discussion Board
CVE-2026-115958
Risk Score
Threat Entry
Updated 2026-06-17
Wp Discussion Board - Broken Access Control (CVE-2025-69023)
Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Discussion Board: from n/a through
PLUGIN
Wp Discussion Board
CVE-2025-69023
Risk Score