CVE-2026-4666
The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the use of on user-controlled input in the method of in all versions up…
Published Apr 17, 2026 · updated Jun 17, 2026
The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the use of on user-controlled input in the method of in all versions up to, and including, 2.4.16. The action handler in passes directly to , which calls . An attacker can inject to overwrite the local variable, causing the entire permission check block to be skipped. The nonce check uses a hardcoded action shared across all 8 forum templates, so any user who can view any forum page obtains a valid nonce. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit the title, body, name, and email fields of any forum post, including posts in private forums, admin posts, and moderator posts. Content passes through which strips JavaScript but allows rich HTML.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 17, 2026 · NIST NVD
Detected
The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the use of on user-controlled input in the method of in all versions up to, and including, 2.4.16. The action handler in passes directly to , which calls . An attacker can inject to overwrite the local variable, causing the entire permission check block to be skipped. The nonce check uses a hardcoded ac
Jun 17, 2026 · NIST NVD
Updated
The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the use of on user-controlled input in the method of in all versions up to, and including, 2.4.16. The action handler in passes directly to , which calls . An attacker can inject to overwrite the local variable, causing the entire permission check block to be skipped. The nonce check uses a hardcoded ac
Sources
- CVE.orgVulnerability recordCVE-2026-4666
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-4666
The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the use of on user-controlled input in the method of in all versions up to, and including, 2.4.16. The action
nvd.nist.gov