Mingle Forum

Mingle Forum has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2014; all 7 are fixed as of September 2026. Their average CVSS score is 8.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 5 high. 2014 was the busiest year with 3 disclosures.

The most common weakness is SQL Injection, behind 4 of the records (57%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF).

Every one of the 7 issues recorded for Mingle Forum has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (2) reported by Charlie Eriksen.

Strategic Overview

Avg CVSSHigh

8.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Mingle Forum vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2013-0735

Mingle Forum <= 1.0.33.3 - SQL Injection

Read the full analysis

Vulnerability Records

7 records


2014-08-01 00:00	Mingle Forum < 1.0.34 - Unauthenticated SQL Injection Mingle Forum < 1.0.34	`N/A`	8.8 High	High-Tech Bridge Security Research Lab	Yes
2014-08-01 00:00	Mingle Forum <= 1.0.32.1 - SQL Injection Mingle Forum <= 1.0.32.1	`CVE-2012-5327`	8.8 High	Gianluca Brindisi	Yes
2014-08-01 00:00	Mingle Forum <= 1.0.32.1 - SQL Injection Mingle Forum < 1.0.33	`CVE-2012-5328`	8.8 High	Gianluca Brindisi	Yes
2013-02-20 00:00	Mingle Forum <= 1.0.33.3 - SQL Injection Mingle Forum <= 1.0.33.3	`CVE-2013-0735`	9.8 Critical	Charlie Eriksen	Yes
2013-02-20 00:00	Mingle Forum <= 1.0.33.3 - Stored Cross-Site Scripting Mingle Forum <= 1.0.33.3	`CVE-2013-0734`	7.2 High	Charlie Eriksen	Yes
2013-01-02 00:00	Mingle Forum <= 1.0.34 - Cross-Site Request Forgery Mingle Forum <= 1.0.34	`CVE-2013-0736`	8.8 High	Anonymous	Yes
2012-05-15 00:00	Mingle Forum <= 1.0.33 - Cross-Site Scripting Mingle Forum <= 1.0.33	`N/A`	6.1 Medium	Heine Pedersen	Yes

Showing 1–7 of 7 reports