CVE-2022-40206: Gvectors Wpforo Forum

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public.

Affected products

• Gvectors Wpforo Forum: up to and including 2.0.5

Published 2022-11-08. Last modified 2026-06-17.