CVE-2026-12697 | wpForo Forum Plugin up to 3.1.1 on WordPress Chat Message Deletion authorization

July 31, 2026 Yanac

A vulnerability marked as problematic has been reported in wpForo Forum Plugin up to 3.1.1 on WordPress. Affected by this vulnerability is an unknown functionality of the component Chat Message Deletion. Performing a manipulation results in authorization bypass.

This vulnerability is identified as CVE-2026-12697. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More