Website Toolbox Forum
Website Toolbox Forum has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Website Toolbox Forum has a vendor fix available, so running the current release closes it.
All of these findings were reported by vgo0. Website Toolbox Forum is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-12338Website Toolbox Community <= 2.0.1 - Reflected Cross-Site Scripting via websitetoolbox_username
Read the full analysisVulnerability Records
Website Toolbox Forum
Author
Website Toolbox LLC
Effortlessly build a beautiful discussion forum with instant setup, seamless embedding, and exceptional support. Host secure, private, organized discussions in your own branded community forum. Ranked #1 Forum Provider by StarReviews! Not a Website Toolbox Forum owner? Create a Forum Now! Plugin Features Embeddable – The forum can be seamlessly embedded into your WordPress website or linked to as a stand-alone page. Single Sign On – Users are automatically signed in to your forum when they sign in to your WordPress website. Signup Integration – Forum accounts are automatically created for your existing or new WordPress users. Embedded Comments – Spark discussions on your WordPress pages or blog posts by instantly creating a related topic in your forum and seamlessly embedding the comments. Highlight Discussions – Use the WordPress widget to embed the latest or most popular discussions. Key Forum Benefits Instant Setup Phone/Chat/Email Support SEO and Mobile Friendly Fully Customizable Public or Private White Label Key Forum Features Easy theme editor Charge subscription fees iOS and Android apps Automatic AI moderation Instant messaging Chat room Share files, photos, and videos “Like” posts User reputation Announce and organize events Create polls Set user permissions Approve posts and signups Anti-spam protection Import or export your data …and much more! Learn More
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C