CVE-2026-119164 | tomdever wpForo Forum Plugin up to 3.2.2 on WordPress Secondary Groupids Authorization Guard classes/Members.php Members::update secondary_groupids privileges management (EUVD-2026-119037)

SecurityVulns
Yanac

A vulnerability classified as critical was found in tomdever wpForo Forum Plugin up to 3.2.2 on WordPress. This issue affects the function Members::update of the file classes/Members.php of the component Secondary Groupids Authorization Guard. Executing a manipulation of the argument secondary_groupids can lead to improper privilege management.

This vulnerability is tracked as CVE-2026-119164. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More