Threats tagged 'ghsa-x66g-mh39-q4gx'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.3%	CVE-2026-12697wpForo Forum (WordPress plugin) · Insecure Direct Object Reference Medium5.4EPSS 0.3%2026-07-31CVE Database V5CVE-2026-12697 CVE-2026-12697 is a medium severity vulnerability in the wpForo Forum WordPress plugin before version 3.1.2. It allows subscriber-level users to delete AI chat message histories of other users without proper authorization verification. This occurs because the plugin does not confirm that the AI chat conversation being deleted belongs to the requesting user. EPSS 0.3%Vulnerability CWE-639 #ghsa-x66g-mh39-q4gx	CVE Database V5	2026-07-31

Page 1 of 1