Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The wpForo Forum plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.13 via deserialization of untrusted input in the 'wpforo_display_array_data' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-0910 PHP Object Injection in wpForo Forum Plugin for WordPress Versions 2.4.13 and Below https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0910
Post summary
The post announces a PHP Object Injection vulnerability in wpForo Forum Plugin for WordPress versions 2.4.13 and earlier.
[CVE-2026-0910: HIGH] Vulnerability alert: wpForo Forum plugin for WordPress versions up to 2.4.13 susceptible to PHP Object Injection, allowing authenticated users to inject malicious code. Be cautious!#cve,CVE-2026-0910,#cybersecurity https://cvefind.com/CVE-2026-0910
Post summary
Alert about CVE-2026-0910 in wpForo Forum plugin; PHP Object Injection vulnerability affecting versions up to 2.4.13, allowing authenticated users to inject malicious code.
🟠 CVE-2026-0910 - High The wpForo Forum plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.13 via deserialization of untrusted input in the 'wpforo_display_array_dat... https://www.thehackerwire.com/vulnerability/CVE-2026-0910/ https://t.co/JbCdX1rFdj
Post summary
CVE‑2026‑0910 identifies a PHP Object Injection vulnerability in wpForo Forum plugin versions up to 2.4.13, with details provided but no exploitation or patch information.