critical9.8
CVE-2018-16613
An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress.
Impact
An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privilege to the forum administrator without any form of user interaction.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gvectors | Wpforo Forum | before 1.5.2 |
References
- NVD record
- CVE.org record
- https://github.com/9emin1/advisories
- https://github.com/9emin1/advisories/blob/master/wpForo-1-5-1.md
- https://wordpress.org/plugins/wpforo/#developers
- https://github.com/9emin1/advisories
- https://github.com/9emin1/advisories/blob/master/wpForo-1-5-1.md
- https://wordpress.org/plugins/wpforo/#developers