CVE-2026-12697
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/07/2026
Last modified:
31/07/2026
Description
The wpForo Forum WordPress plugin before 3.1.2 does not verify that an AI chat conversation belongs to the requesting user before deleting its messages, allowing users with a subscriber-level account to permanently delete the stored AI chat message history of any other user.