← All advisories

Medium severity6.1NVD Advisory· Published Jun 15, 2020· Updated Jun 17, 2026

CVE-2019-19112

CVE-2019-19112

Description

The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php.

Affected products

3

Gvectors/Wpforo
cpe:2.3:a:gvectors:wpforo:1.6.5:*:*:*:*:wordpress:*:*
WordPress/wpForo plugindescription
WordPress/Wpforollm-fuzzy
Range: <=1.6.5
Package: https://wordpress.org/plugins/wpforo

Patches

Vulnerability mechanics

References

1

twitter.com/Sh0ckFR/status/1257298443527053313nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.