← Vulnerability feed

Vulnerability record · CVE-2026-28562 · published 28 February 2026

CVE-2026-28562: Gvectors wpforo forum sql injection vulnerability

Gvectors · Wpforo Forum

wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers exploit the wpfob parameter with CASE WHEN payloads to perform blind boolean extraction of credentials from the WordPress database.

8.8 CVSS 4.0 High EPSS 0.50% · top 59.9% CWE-89 · SQL injection
8.8CVSS 4.0 base score
0.50%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers exploit the wpfob parameter with CASE WHEN payloads to perform blind boolean extraction of credentials from the WordPress database.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://wordpress.org/plugins/wpforo/ Product
https://wordpress.org/plugins/wpforo/#developers Release Notes
https://www.vulncheck.com/advisories/wpforo-sql-injection-via-topics-order-by-parameter Third Party Advisory

Track CVE-2026-28562 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-47868Gvectors wpforo forum improper privilege management vulnerabilityImproper Privilege Management vulnerability in wpForo wpForo Forum allows Privilege Escalation.This issue affects wpForo Forum: from n/a through 2.2.…EPSS 0.48%9.8CVE-2018-16613Gvectors wpforo forum vulnerabilityAn issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privileg…EPSS 2.7%8.8CVE-2023-47870Gvectors wpforo forum cross-site request forgery vulnerabilityCross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross Site Request Forgery, Access…EPSS 0.27%8.8CVE-2023-2249wpForo Forum plugin LFI, SSRF and PHAR deserialization via file_get_contentsThe wpForo Forum plugin for WordPress up to and including 2.1.7 passes attacker-controlled data to file_get_contents without proper verification, ena…EPSS 61%analysed8.8CVE-2022-40200Gvectors wpforo forum unrestricted file upload vulnerabilityAuth. (subscriber+) Arbitrary File Upload vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.EPSS 0.96%8.8CVE-2022-40192Gvectors wpforo forum cross-site request forgery vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.EPSS 0.48%8.8CVE-2022-38144Gvectors wpforo forum cross-site request forgery vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress.EPSS 0.51%8.1CVE-2024-43288Gvectors wpforo forum insecure direct object reference vulnerabilityAuthorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4.EPSS 0.31%

Source: NIST National Vulnerability Database (record CVE-2026-28562), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.