CVE-2025-58597: Tomdever Wpforo Forum

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Authorization Bypass Through User-Controlled Key vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpForo Forum: from n/a through <= 2.4.6.

Affected products

• Tomdever Wpforo Forum: up to and including 2.4.6

Published 2025-09-03. Last modified 2026-09-30.