wpForo Forum, CVE-2025-66070

CVE, Research URL: CVE-2025-66070
Home page URL: Security reports for wpForo Forum
Application: wpForo Forum
Published on: Dec 18, 2025
Research Description: Missing Authorization vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpForo Forum: from n/a through <= 2.4.10.
Affected versions: max 2.4.10.
Status: vulnerable