← Database

CVE-2022-40200

CRITICAL CVSS: 9.9 Published: 2022-11-17 Modified: 2026-06-17

Description

Auth. (subscriber+) Arbitrary File Upload vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.

Affected Platforms

Gvectors Wpforo Forum

Weakness Type

CWE-434, CWE-434

References