CVE-2026-95870 | tomdever wpForo Forum Plugin up to 3.2.1 on WordPress data sql injection (EUVD-2026-119038)

November 7, 2026 Yanac

A vulnerability was found in tomdever wpForo Forum Plugin up to 3.2.1 on WordPress. It has been declared as critical. Affected is an unknown function. Executing a manipulation of the argument data can lead to sql injection.

This vulnerability appears as CVE-2026-95870. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More