Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Wpforo - Cross-Site Request Forgery (CSRF) (CVE-2019-19109)
The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.
PLUGIN
Wpforo
CVE-2019-19109
Risk Score
Threat Entry
Updated 2026-06-17
Wpforo - Cross-Site Scripting (XSS) (CVE-2019-19112)
The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php.
PLUGIN
Wpforo
CVE-2019-19112
Risk Score
Threat Entry
Updated 2026-06-17
Wpforo - Cross-Site Scripting (XSS) (CVE-2019-19111)
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.
PLUGIN
Wpforo
CVE-2019-19111
Risk Score
Threat Entry
Updated 2026-06-17
Wpforo - Cross-Site Scripting (XSS) (CVE-2019-19110)
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.
PLUGIN
Wpforo
CVE-2019-19110
Risk Score
Threat Entry
Updated 2026-06-17
Wpforo - Security Vulnerability (CVE-2018-16613)
An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privilege to the forum administrator without any form of user interaction.
PLUGIN
Wpforo
CVE-2018-16613
Risk Score
Threat Entry
Updated 2026-06-17
Wpforo - Cross-Site Scripting (XSS) (CVE-2018-11709)
wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.
PLUGIN
Wpforo
CVE-2018-11709
Risk Score
Threat Entry
Updated 2026-06-17
Wpforo - SQL Injection (CVE-2018-11515)
The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.
PLUGIN
Wpforo
CVE-2018-11515
Risk Score