wp-forum

wp-forum has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2008 and 2015; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 0 high.

The most common weakness is SQL Injection, behind 3 of the records (100%).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2015.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSCritical

9.8/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all wp-forum vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8

WP Forum <= 2.4 - SQL Injection

Read the full analysis

Vulnerability Records

3 records


2015-05-15 00:00	WP Forum <= 2.4 - SQL Injection wp-forum <= 2.4	`N/A`	9.8 Critical	Ashiyane Digital Security Team	No
2009-09-28 00:00	WP Forum <= 2.3 - Multiple SQL Injections wp-forum < 2.4	`CVE-2009-3703`	9.8 Critical	Juan Galiana Lara	Yes
2008-01-19 00:00	WP-Forum <= 1.7.4 - Remote SQL Injection wp-forum <= 1.7.4	`CVE-2008-0388`	9.8 Critical	WEBSEC TEAM	Yes

Showing 1–3 of 3 reports