Vulnerabilities

TI-2026-19863 CVE-2026-24624 · GHSA-f6x3-8w84-g4fw

WordPress Neoforum plugin <= 1.0 - SQL Injection vulnerability

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in saeros1984 Neoforum neoforum allows Blind SQL Injection.This issue affects Neoforum: from n/a through <= 1.0.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00343 Published 2026-01-23 No fix listed CWE-89

TI-2026-19862 CVE-2026-24623 · GHSA-q7qm-9q6p-5wg7

WordPress Neoforum plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in saeros1984 Neoforum neoforum allows Reflected XSS.This issue affects Neoforum: from n/a through <= 1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2026-01-23 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Neoforum plugin <= 1.0 - SQL Injection vulnerability

WordPress Neoforum plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability