CVE-2022-40632

Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.

Score

CVSS 3.1 5.4 Medium

Status

Modified - audit@patchstack.com

Published

2022-11-08

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Wpforo Forum (Gvectors)
• Wpforo Forum Wordpress Plugin (Gvectors Team)

References

• https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-5-cross-site-request-forgery-csr…
• https://wordpress.org/plugins/wpforo/