Authorization Bypass Through User-Controlled Key vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects wpForo Forum: from n/a through 2.4.6.
Metrics
Affected Vendors & Products
References
History
Wed, 03 Sep 2025 19:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Wordpress
Wordpress wordpress |
|
Vendors & Products |
Wordpress
Wordpress wordpress |
Wed, 03 Sep 2025 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Wed, 03 Sep 2025 14:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Authorization Bypass Through User-Controlled Key vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects wpForo Forum: from n/a through 2.4.6. | |
Title | WordPress wpForo Forum Plugin <= 2.4.6 - Insecure Direct Object References (IDOR) Vulnerability | |
Weaknesses | CWE-639 | |
References |
| |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: Patchstack
Published:
Updated: 2025-09-03T17:51:38.530Z
Reserved: 2025-09-03T09:02:27.116Z
Link: CVE-2025-58597

Updated: 2025-09-03T17:39:11.408Z

Status : Awaiting Analysis
Published: 2025-09-03T15:15:40.477
Modified: 2025-09-04T15:35:29.497
Link: CVE-2025-58597

No data.

Updated: 2025-09-03T19:30:16Z