Forumwp vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FO

Product

Forumwp

by Ultimatemember · last CVE Dec 16, 2024

4

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 1High 1Medium 2Low 0

Severity

All severities4 Critical1 High1 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Forumwp to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-54367	9.8	1%	Dec 16	WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability Affected: before 2.1.1; before 2.1.1
CVE-2024-8428	8.8	0%	Sep 6	ForumWP – Forum & Discussion Board Plugin <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover Affected: through 2.0.2
CVE-2024-11204	6.1	0%	Dec 6	ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting via url Parameter Affected: before 2.1.3; before 2.1.3
CVE-2024-10879	6.1	0%	Dec 6	ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting Affected: before 2.1.3; before 2.1.3