What is the CVSS score of CVE-2026-40767?

CVE-2026-40767 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

Which versions of wpForo Forum are affected by CVE-2026-40767?

wpForo Forum WordPress plugin versions before 3.0.2 contain an authentication bypass allowing unauthenticated access to restricted forum content.. A patch is available.

How to fix or mitigate CVE-2026-40767?

Within 24 hours: inventory all WordPress installations using wpForo Forum and document current plugin versions. Within 7 days: deploy wpForo Forum version 3.0.2 or later to all affected systems. Within 30 days: review forum access logs for evidence of unauthorized content retrieval and determine if user notification is required.

wpForo Forum CVE-2026-40767

EUVD-2026-36977 HIGH

Improper Preservation of Permissions (CWE-281)

2026-06-15 Patchstack

GHSA-67cg-j2qq-7wv4

Information Disclosure Wpforo Forum

7.5

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

Network-reachable WordPress plugin endpoint, no authentication or interaction per description, and impact is confidentiality-only disclosure of restricted forum content with no integrity or availability effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jun 15, 2026 - 22:12 vuln.today

Patch available

Jun 15, 2026 - 22:02 EUVD

DescriptionCVE.org

Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions.

AnalysisAI

Unauthenticated information disclosure in the wpForo Forum WordPress plugin versions prior to 3.0.2 allows remote attackers to bypass access controls and read forum content that should be restricted. The flaw stems from improper permission preservation (CWE-281), letting unauthenticated users access data intended only for authorized members. No public exploit identified at time of analysis, but a vendor patch is available via Patchstack advisory.

Technical ContextAI

wpForo Forum is a popular WordPress plugin by tomdever used to add discussion forum capabilities to WordPress sites. The vulnerability is classified as CWE-281 (Improper Preservation of Permissions), meaning an action that should enforce assigned permission checks fails to do so, allowing unauthorized actors to access protected forum resources. The CPE cpe:2.3:a:tomdever:wpforo_forum confirms the affected component is the wpForo Forum plugin distributed through the WordPress plugin ecosystem, where access-control checks for forum boards, topics, or private content are likely missing or insufficiently enforced on certain endpoints.

RemediationAI

Upgrade the wpForo Forum plugin to version 3.0.2 or later through the WordPress admin plugin update mechanism - this is the vendor-released patch and the primary fix. If immediate patching is not possible, restrict access to the forum endpoints at the web server or WAF layer (for example by blocking unauthenticated requests to wpforo REST routes or AJAX actions), with the trade-off that this will break forum functionality for legitimate anonymous visitors, or temporarily deactivate the plugin if the forum is non-essential, which will remove all forum functionality from the site. Refer to the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/wpforo/vulnerability/wordpress-wpforo-forum-plugin-3-0-2-broken-access-control-vulnerability for vendor guidance.