wpForo Forum Missing Capability Check Allows User Group Tampering

Summary

Authenticated users can change user group roles in wpForo Forum, potentially disrupting site access controls. This can happen because the software doesn't properly check user permissions. To fix this, update to the latest version of wpForo Forum.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
gvectors	wpforo_forum	> 2.4.0 , <= 2.4.16	–

Original title

wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wpForo usergroup reassignment via the wpforo_synch_roles AJAX handler. Attacker...

Original description

wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wpForo usergroup reassignment via the wpforo_synch_roles AJAX handler. Attackers access the usergroups admin page, accessible to any authenticated user, to obtain a nonce, then remap all wpForo usergroups to arbitrary WordPress roles.

nvd CVSS3.1 6.5

nvd CVSS4.0 7.1

Vulnerability type

CWE-862 Missing Authorization

https://wordpress.org/plugins/wpforo/ Product
https://wordpress.org/plugins/wpforo/#developers Release Notes
https://www.vulncheck.com/advisories/wpforo-forum-privilege-escalation-via-role-... Third Party Advisory