bbPress Move Topics
bbPress Move Topics has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2018 and 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2018 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.
2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Xuan Chien. bbPress Move Topics is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.
CVE-2025-49959bbPress Move Topics <= 1.1.6 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
bbPress Move Topics
Author
Pascal Casier
Discussions start as comments on a post but you want them to continue on your forum? bbPress topics are not always created in the correct forum by users? Then use this tool to deal with it! Move topics to another forum Move topic to another forum Hide topics so you do not need to deal with them again Convert (custom) post or page comments to topic with replies Delete comments after conversion to replies Add a new comment with the link to the forum Convert unapproved comments into unapproved replies Deal with anonymous user comments Cut topic or replies after a certain number of words Using Start from your dashboard on “Forum > Move Topics” PS. Check out other plugins like bbP Toolkit and more from me to complete your bbPress experience
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C