Vulnerabilities in tomdever
32 resultsCVE-2026-95870HIGHwpForo Forum <= 3.2.1 - Unauthenticated SQL Injection via 'data' ParameterEPSS 0.3%CVE-2026-120532MEDIUMwpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Reply Body in Moderation FormsEPSS 0.3%CVE-2026-49769CRITICALWordPress wpForo Forum plugin <= 3.1.0 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-31420HIGHWordPress wpForo Forum plugin <= 2.4.2 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-42682CRITICALWordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-40767HIGHWordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-40798CRITICALWordPress wpForo Forum plugin <= 3.0.4 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-11740MEDIUMwpForo Forum <= 2.4.9 - Authenticated (Susbscriber+) SQL InjectionEPSS 0.3%CVE-2025-66070HIGHWordPress wpForo Forum plugin <= 2.4.10 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-4406MEDIUMwpForo Forum <= 2.4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile AvatarEPSS 0.2%CVE-2026-93772MEDIUMWordPress wpForo Forum plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-93747MEDIUMwpForo Forum <= 3.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'telegram' Profile FieldEPSS 0.2%