Vulnerabilities in XenForo

11 results

CVE-2026-35056HIGHXenForo Remote Code Execution via Authenticated AdminEPSS 0.7%CVE-2025-71279CRITICALXenForo Passkey Security BypassEPSS 0.5%CVE-2025-71282HIGHXenForo Path Disclosure via open_basedir ExceptionsEPSS 0.3%CVE-2025-71281HIGHXenForo Template Method Call Restriction BypassEPSS 0.3%CVE-2025-71278HIGHXenForo OAuth2 Unauthorized Scope RequestEPSS 0.3%CVE-2023-53904MEDIUMXenforo 2.2.13 Authenticated Stored Cross-Site Scripting via Smilie CategoriesEPSS 0.2%CVE-2026-35057MEDIUMXenForo Stored Cross-Site Scripting via Structured Text MentionsEPSS 0.2%CVE-2026-35055MEDIUMXenForo Cross-Site Scripting via Lightbox in PostsEPSS 0.2%CVE-2024-58342MEDIUMXenForo Open Redirect via getDynamicRedirectEPSS 0.1%CVE-2026-35054MEDIUMXenForo Stored Cross-Site Scripting via BB Code RenderingEPSS 0.1%CVE-2025-71280MEDIUMXenForo Local Account Page Caching Information DisclosureEPSS 0.1%