6.5Medium

CVE-2025-0764wpForo Forum <= 2.4.1 - Authenticated (Subscriber+) Arbitrary File Read in update

tomdever wpForo Forum Published: 2025-02-28 10:03 (1 year ago)

Description

The wpForo Forum plugin for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'update' method of the 'Members' class in all versions up to, and including, 2.4.1. This makes it possible for authenticated attackers, with subscriber-level privileges or higher, to read arbitrary files on the server.

Weakness (CWE): CWE-20

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
gvectors	wpforo forum	< 2.4.2
tomdever	wpForo Forum	≤ 2.4.1

References and patches

https://www.wordfence.com/threat-intel/vulnerabilities/id/8cd8ffcb-0a24-4e0a-a9f9-23501742715f?source=cve Third Party Advisory
https://plugins.trac.wordpress.org/changeset/3245711/wpforo Patch

CPE matches (NVD) (1)

cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:* < 2.4.2

CVSS score

6.5Medium

Source: Wordfence · CVSS 3.1

Attack vector: Network
Attack complexity: Low
Privileges required: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

All scores (2)

cna	CVSS 3.1	6.5Medium
security@wordfence.com	CVSS 3.1	6.5Medium

EPSS (chance of exploitation in 30 days)

0.38%

higher than 33% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: partial

Timeline

ID reserved2025-01-27
Published2025-02-28 10:03
Reached IP-DB2026-10-25 00:01
Last updated2026-06-17 11:27

Assigned by (CNA): Wordfence
NVD status: Analyzed

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — WordPress plugins & themes

6.5Medium

CVE-2026-125796 2 hours ago

WordPress JS Help Desk plugin <= 5.0.5 - Broken Access Control vulnerability

Ahmad JS Help Desk

Missing Authorization vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 5.0.5.

7.1High

CVE-2026-125830 2 hours ago

WordPress belingoGeo plugin <= 1.13.3 - Cross Site Scripting (XSS) vulnerability

Belingo belingoGeo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Belingo belingoGeo belingogeo allows Reflected XSS.This issue affects belingoGeo: from n/a through 1.13.3.

5.0Medium

CVE-2026-125826 2 hours ago

WordPress PowerPress Podcasting plugin <= 11.18.3 - Arbitrary File Deletion vulnerability

Blubrry Podcasting PowerPress Podcasting

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Path Traversal.This issue affects PowerPress Podcasting: from n/a through 11.18.3.

7.5High

CVE-2026-125823 2 hours ago

WordPress Gutenverse plugin <= 4.2.2 - Denial of Service Attack vulnerability

Jegstudio Gutenverse

Allocation of Resources Without Limits or Throttling vulnerability in Jegstudio Gutenverse gutenverse allows HTTP DoS.This issue affects Gutenverse: from n/a through 4.2.2.

7.1High

CVE-2026-125818 2 hours ago

WordPress wpDiscuz plugin <= 7.6.75 - Cross Site Scripting (XSS) vulnerability

AdvancedCoding wpDiscuz

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Stored XSS.This issue affects wpDiscuz: from n/a through 7.6.75.

7.1High

CVE-2026-125804 2 hours ago

WordPress AI Engine plugin <= 3.9.3 - Cross Site Scripting (XSS) vulnerability

Meow Apps AI Engine

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meow Apps AI Engine ai-engine allows Stored XSS.This issue affects AI Engine: from n/a through 3.9.3.