Medium
CVE-2026-93747
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 56
Reset filters
Medium
CVE-2026-93772
wpForo Forum <= 3.1.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-80514
wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion
High
CVE-2026-80513
wpForo Forum <= 3.1.5 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-91092
wpForo Forum <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Guest Post Takeover via wpforo_post_edit Action / Forged comment_author_email Cookie
Medium
CVE-2026-15439
GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-5097
wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter
Medium
CVE-2026-12698
wpForo Forum <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Account Status Manipulation
Medium
CVE-2026-12696
wpForo Forum <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-12697
wpForo Forum <= 3.1.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Chat Message Deletion
Medium
CVE-2026-15021
wpForo Forum <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'location' Profile Field
Medium
CVE-2026-57636
wpForo Forum <= 3.0.9 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-49769
wpForo Forum <= 3.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-49767
wpForo Forum <= 3.1.0 - Missing Authorization
Medium
CVE-2026-42682
wpForo Forum <= 3.0.6 - Missing Authorization
High
CVE-2026-40798
wpForo Forum <= 3.0.4 - Unauthenticated SQL Injection
Medium
CVE-2026-40767
wpForo Forum < 3.0.2 - Missing Authorization
High
CVE-2026-6248
wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
Medium
CVE-2026-4666
wpForo Forum <= 2.4.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Forum Post Modification via 'guestposting' Parameter
High
CVE-2026-5809
wpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameter
High
CVE-2026-3666
wpForo Forum <= 2.4.16 - Authenticated (Subscriber+) Arbitrary File Deletion via Post Body
High
CVE-2026-1581
wpForo Forum <= 2.4.14 - Unauthenticated Time-Based SQL Injection
High
CVE-2026-0910
wpForo Forum <= 2.4.13 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-13126
wpForo Forum <= 2.4.12 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.