CVE-2022-38144
Severity CVSS v4.0:
Pending analysis
Type:
CWE-352
Cross-Site Request Forgery (CSRF)
Publication date:
09/09/2022
Last modified:
23/04/2025
Description
Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin
Impact
Base Score 3.x
8.80
Severity 3.x
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:* | 2.0.5 (including) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-5-cross-site-request-forgery-csrf-vulnerability/_s_id=cve
- https://wordpress.org/plugins/wpforo/#developers
- https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-5-cross-site-request-forgery-csrf-vulnerability/_s_id=cve
- https://wordpress.org/plugins/wpforo/#developers