← All advisories

Critical severity9.1NVD Advisory· Published Jun 1, 2026· Updated Jun 1, 2026

CVE-2026-42682

CVE-2026-42682

Description

Missing Authorization vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects wpForo Forum: from n/a through 3.0.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Wpforoinferred
Range: <=3.0.6
Package: https://wordpress.org/plugins/wpforo
WordPress/Wpforo Forumllm-fuzzy
Range: <=3.0.6

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/wpforo/vulnerability/wordpress-wpforo-forum-plugin-3-0-6-broken-access-control-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (May 18, 2026 to May 24, 2026)
Wordfence Blog · May 28, 2026