← CVE Intelligence

CVE-2023-47870

WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF) PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross Site Request Forgery, Accessing Functionality Not Properly Constrained by ACLs leading to forced all users log out.This issue affects wpForo Forum: from n/a through 2.2.6.

Affected (CNA)

Vendor / productVersions
gVectors Team / wpForo Forumaffected n/a through 2.2.6

CWE

CWE-352, CWE-862

References

ADP enrichment

CVE

No English description supplied.