{
 "id": "WPSEC-2026-3155",
 "url": "https://wpsec.com/vuln/WPSEC-2026-3155/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-3155/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-3155/index.md",
 "title": "wpForo Forum <= 3.2.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Fields",
 "description": "The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via user profile fields (display name, first and last name, website URL, about/description and rich-text fields such as the signature) in all versions up to, and including, 3.2.4. This is due to insufficient input sanitization when these fields are saved during profile updates and registration, and missing output escaping where they are rendered, such as in quote blocks and the admin members list. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts that will execute whenever a user, including an administrator, accesses a page displaying the injected profile data.",
 "plugin": {
  "slug": "wpforo",
  "name": "wpForo Forum",
  "full_name": "wpForo Forum",
  "wordpress_org": "https://wordpress.org/plugins/wpforo/",
  "advisories_url": "https://wpsec.com/vuln/plugin/wpforo/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/wpforo"
 },
 "type": "XSS",
 "cwe": [
  "CWE-79"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 6.4,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "3.2.5",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 3.2.5"
  ]
 },
 "introduced_in": null,
 "fixed_in": "3.2.5",
 "remediation": "Update to 3.2.5 or later.",
 "fix_released": "2026-11-14T05:56:55+00:00",
 "published": "2026-11-15T06:40:49+00:00",
 "updated": "2026-11-14T16:16:46.558987+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-3155/",
  "https://plugins.svn.wordpress.org/wpforo/tags/3.2.5/",
  "https://wordpress.org/plugins/wpforo/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/wpforo",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-15"
 }
}