cleantalk
Vulnerabilities and Security Researches

wpForo Forum, CVE-2025-66070

CVE, Research URL

CVE-2025-66070

Application

wpForo Forum

Published on
Dec 18, 2025
Research Description
Missing Authorization vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpForo Forum: from n/a through <= 2.4.10.
Affected versions
max 2.4.10.
Status
vulnerable