CVE-2019-19111

The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.

Date published : 2020-06-15

THREAD: Today, I release my vulnerabilities affecting #wordpress #wpForo 1.6.5 (20000+ active installations) but like asked by the editor, I release it after 3 months, they released a patch really fast, thank you to them

— Sh0ck (@Sh0ckFR) May 4, 2020