Threats tagged 'ghsa-898j-cg5m-8wj7'

CVE-2026-12698 is a medium severity vulnerability in the wpForo Forum WordPress plugin before version 3.1.3. It allows subscriber-level users to improperly modify administrator-controlled profile fields, including account state and reputation. This flaw enables unauthorized self-activation of pending or banned accounts and manipulation of forum reputation scores.