Threats tagged 'ghsa-732c-5rpv-qgr5'

The wpForo Forum plugin for WordPress contains a privilege escalation vulnerability in all versions up to and including 3.2.2. This flaw allows authenticated users with Subscriber-level access and at least three approved posts to escalate their privileges to Administrator by exploiting a type-confusion issue in the handling of the secondary_groupids parameter. The vulnerability enables attackers to gain full administrative control over forum access and user content editing.