Approved changes feed: RSS · Atom

cpe:2.3:a:gvectors:wpforo:1.6.5:*:*:*:*:wordpress:*:*

part: a version: 1.6.5 update: *

VendorGvectors (fd5aa5f3-051e-5ac8-8b58-45b407504537)
ProductWpforo (755718b2-3b3f-5950-bd3b-2f5dafd79cf3)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/dedidata/wpforo purl2cpe 2026-06-01 10:11:59.945553
pkg:github/remowalrus/wpforo purl2cpe 2026-06-01 10:11:59.945555

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19112 vulnerable 2026-06-08 05:13:21.520605 Details available
The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php.
Published: 2020-06-15T13:10:41.000Z
Updated: 2024-08-05T02:09:39.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19111 vulnerable 2026-06-08 05:13:21.520230 Details available
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.
Published: 2020-06-15T13:10:49.000Z
Updated: 2024-08-05T02:09:39.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19110 vulnerable 2026-06-08 05:13:21.519841 Details available
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.
Published: 2020-06-15T13:10:47.000Z
Updated: 2024-08-05T02:09:39.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19109 vulnerable 2026-06-08 05:13:21.519344 Details available
The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.
Published: 2020-06-15T13:10:44.000Z
Updated: 2024-08-05T02:09:39.311Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.