Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics via the global RSS feed endpoint. Attackers request the RSS feed without a forum ID parameter, bypassing the privacy and status WHERE clauses that are only applied when a specific forum ID is present in the query.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28559 - wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed Intel Report: https://ift.tt/KxlJw1I
Post summary
A new CVE-2026-28559 affecting wpForo Forum 2.4.14 is disclosed, exposing information via the global RSS feed.
CVE-2026-28559 Information Disclosure in wpForo Forum 2.4.14 via Unauthenticated RSS Feed Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28559
Post summary
A new information disclosure vulnerability (CVE-2026-28559) affecting wpForo Forum 2.4.14 via an unauthenticated RSS feed endpoint has been reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gvectors | wpforo_forum | - | wordpress | - |