← Database

CVE-2022-40205

MEDIUM CVSS: 5.4 Published: 2022-11-08 Modified: 2026-06-17

Description

Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved.

Affected Platforms

Gvectors Wpforo Forum

Weakness Type

CWE-639, CWE-639

References