CVE-2026-49769

CriticalCVSS 9.8

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile — higher than 30% of all known CVEs

There is an unauthenticated PHP Object Injection vulnerability in wpForo Forum versions <= 3.1.0.

An attacker could exploit this vulnerability to execute unauthorized code, potentially leading to system compromise.

It is recommended to update wpForo Forum to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated PHP Object Injection in wpForo Forum <= 3.1.0 versions.