CVE-2026-28562
Feb 28, 2026
wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers ...
Read Advisory
Gvectors Wpforo Forum Vulnerabilities
1 advisories affecting Gvectors Wpforo Forum
1
Total CVEs
0
Critical
1
High