CVE-2018-11515

The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.

Date published : 2018-05-28

https://github.com/DediData/wpforo/issues/1

https://wpvulndb.com/vulnerabilities/9089