CVE-2018-11515: Gvectors Wpforo

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.

Affected products

• Gvectors Wpforo: before 1.4.5 (fixed in 1.4.5)

Published 2018-05-28. Last modified 2026-06-17.