wpForo Forum, CVE-2022-40206

CVE, Research URL: CVE-2022-40206
Home page URL: Security reports for wpForo Forum
Application: wpForo Forum
Published on: Nov 09, 2022
Research Description: Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public.
Affected versions: Min -, max 2.0.6.
Status: vulnerable