xenforo

Top products

The 15 most recently published vulnerabilities affecting xenforo.

• CVE-2026-74239XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows7.2Sep 8, 2026
• CVE-2026-73321XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser6.5Sep 8, 2026
• CVE-2026-73320XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint6.1Sep 8, 2026
• CVE-2026-73319XenForo < 2.3.13 XSS via Dynamic Redirect Handler6.1Sep 8, 2026
• CVE-2026-73318XenForo < 2.3.13 Missing Authorization via force-agreement Controller3.8Sep 8, 2026
• CVE-2026-73317XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher2.7Sep 8, 2026
• CVE-2026-73316XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider7.5Sep 8, 2026
• CVE-2026-73315XenForo < 2.3.13 SSRF via PayPal REST Webhook Handler8.6Sep 8, 2026
• CVE-2026-73314XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook7.5Sep 8, 2026
• CVE-2026-73313XenForo < 2.3.13 MFA Bypass via Passkey TFA Provider6.8Sep 8, 2026
• CVE-2026-73312XenForo < 2.3.13 Refresh Token Replay via Expired Access Token7.4Sep 8, 2026
• CVE-2026-73311XenForo < 2.3.13 OAuth2 Authorization Code Reuse7.4Sep 8, 2026
• CVE-2026-73310XenForo < 2.3.13 OAuth2 Authorization Code Token Theft via redirect_uri Bypass5.9Sep 8, 2026
• CVE-2026-73309XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpoint7.4Sep 8, 2026
• CVE-2026-35057XenForo Stored Cross-Site Scripting via Structured Text Mentions6.4Apr 1, 2026