Filtered by vendor Gvectors Subscriptions
Total 42 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-11709 1 Gvectors 1 Wpforo Forum 2024-11-21 N/A
wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.
CVE-2018-11515 1 Gvectors 1 Wpforo 2024-11-21 N/A
The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.