CVE-2023-47870

Name of the Vulnerable Software and Affected Versions wpForo Forum versions through 2.2.6

Description The issue is related to Cross-Site Request Forgery (CSRF) and Missing Authorization, allowing unauthorized access to functionality not properly constrained by Access Control Lists (ACLs). This can lead to forced log out of all users.

Recommendations For versions through 2.2.6, update to a version that includes a fix for this issue to prevent Cross-Site Request Forgery and unauthorized access. As a temporary workaround, consider restricting access to sensitive functionality to minimize the risk of exploitation.