CVE-2018-21006: Bbpress Move Topics Project Bbpress Move Topics

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.

Affected products

• Bbpress Move Topics Project Bbpress Move Topics: before 1.1.6 (fixed in 1.1.6)

Published 2019-08-27. Last modified 2026-06-17.