critical9.8
CVE-2018-11515
The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.
Impact
The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gvectors | Wpforo | before 1.4.5 |