PT-2022-25430 · Gvectors Team · Wpforo Forum
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
gVectors Team wpForo Forum plugin versions <= 2.0.5
Description
The issue is a Cross-Site Request Forgery (CSRF) vulnerability that can lead to topic deletion. This occurs in the gVectors Team wpForo Forum plugin on WordPress.
Recommendations
For gVectors Team wpForo Forum plugin versions <= 2.0.5, update to a version higher than 2.0.5 to resolve the issue. As a temporary workaround, consider restricting access to sensitive topics or implementing additional CSRF protection measures until a patch is available.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wpforo Forum