TI-2026-51988 CVE-2026-73998 · GHSA-rxwj-6jrc-7pm8
WordPress WP w3all phpBB plugin <= 3.0.5 - SQL Injection vulnerability
Priority LOW 37
Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.
axew3
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
axew3 records in CISA KEVNo axew3 vulnerabilities are listed in CISA KEV.
Records
4 records
TI-2026-54464 CVE-2026-78293 · GHSA-2jmp-85xc-229c
WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in WP w3all phpBB <= 3.0.6 versions.
TI-2025-23640 CVE-2025-32575 · GHSA-898w-4rv7-h42q
WordPress WP w3all phpBB Plugin <= 2.9.9 - CSRF to Stored XSS vulnerability
Priority LOW 31
Cross-Site Request Forgery (CSRF) vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Reflected XSS.This issue affects WP w3all phpBB: from n/a through <= 2.9.9.
TI-2025-23371 CVE-2025-32274 · GHSA-mc2j-7pmc-rf52
WordPress w3all phpBB integration Plugin <= 2.9.8 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Cross Site Request Forgery.This issue affects WP w3all phpBB: from n/a through <= 2.9.8.