Login Request a demo
FO
Product
Forumwp
by Ultimatemember · last CVE Dec 16, 2024
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 2Low 0
Severity
All severities4Critical1High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Forumwp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-54367
9.8
1%
Dec 16
Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through <= 2.1.0
Affected: before 2.1.1; before 2.1.1
CVE-2024-8428
8.8
0%
Sep 6
ForumWP – Forum & Discussion Board Plugin <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Affected: through 2.0.2
CVE-2024-11204
6.1
0%
Dec 6
The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 2.1.2 due…
Affected: before 2.1.3; before 2.1.3
CVE-2024-10879
6.1
0%
Dec 6
The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate…
Affected: before 2.1.3; before 2.1.3
Showing 4