← All advisories

Medium severity6.1NVD Advisory· Published Jun 15, 2020· Updated Jun 17, 2026

CVE-2019-19111

CVE-2019-19111

Description

The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.

Affected products

3

Gvectors/Wpforo
cpe:2.3:a:gvectors:wpforo:1.6.5:*:*:*:*:wordpress:*:*
WordPress/wpForo plugindescription
WordPress/Wpforollm-fuzzy
Range: <=1.6.5
Package: https://wordpress.org/plugins/wpforo

Patches

Vulnerability mechanics

References

1

twitter.com/Sh0ckFR/status/1257298443527053313nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.