WordPress plugin
wpForo Forum security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 59 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical4
- High21
- Medium34
- Low0
All wpForo Forum vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
wpForo Forum: common questions
Does wpForo Forum have known vulnerabilities?
Yes. VulnCrest Radar lists 59 known vulnerabilities in wpForo Forum: 4 critical, 21 high, 34 medium. None are known to affect version null.
How do I check which version of wpForo Forum I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent wpForo Forum vulnerability?
CVE-2026-119164, published Nov 6, 2026: wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Privilege Escalation to 'data[secondary_groupids]' CSV Parameter. Severity: High (CVSS 7.5).
Is any wpForo Forum vulnerability listed in CISA KEV?
No. None of the known wpForo Forum vulnerabilities is currently listed in the CISA KEV catalog.