CVE-2022-40205

Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved.

Score

CVSS 3.1 5.4 Medium

Status

Modified - audit@patchstack.com

Published

2022-11-08

Last modified

2026-04-28

Weaknesses

CWE-639

Affected products

• Wpforo Forum (Gvectors)
• Wpforo Forum Wordpress Plugin (Gvectors Team)

References

• https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-5-insecure-direct-object-referen…
• https://wordpress.org/plugins/wpforo/