CVE Alert: CVE-2026-28562 - gVectors Team - wpForo Forum - RedPacket Security

wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql()

RedPacket Security