CVE-2023-47870

—

CVSS 3.1

8.8 high

EPSS

<1%p19

Published

Nov 30, 2023 (Nov 30, 2023)

Modified

Jun 17, 2026

Description

Cross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross Site Request Forgery, Accessing Functionality Not Properly Constrained by ACLs leading to forced all users log out.This issue affects wpForo Forum: from n/a through 2.2.6.

Vendors: gvectors
Products: wpforo forum
Ecosystems: WordPress
Weakness: CWE-352, CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.