PatchTheCVEforumwp vulnerabilities and fixes
Recent CVEs affecting forumwp, with upgrade or downgrade steps. 4 tracked.
forumwp has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-12-16. Highest priority: CVE-2024-54367 (score 53/100).
- CVE-2024-8428 HIGH 8.8 UPGRADE The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via I
- CVE-2024-54367 CRITICAL 9.8 UPGRADE Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.Thi
- CVE-2024-11204 MEDIUM 6.1 UPGRADE The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting vi
- CVE-2024-10879 MEDIUM 6.1 UPGRADE The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting du
FAQ
How do I fix forumwp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is forumwp being exploited right now?
None of the tracked forumwp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which forumwp CVE should I patch first?
CVE-2024-54367 currently ranks highest (53/100): Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.Thi.