CVE-2026-12697 in wpForo Forum Plugin
요약
\~에 의해 MITRE • 2026. 07. 31.
The wpForo Forum WordPress plugin before 3.1.2 does not verify that an AI chat conversation belongs to the requesting user before deleting its messages, allowing users with a subscriber-level account to permanently delete the stored AI chat message history of any other user.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.