Gvectors Vulnerabilities

This vulnerability allows authenticated users, like regular subscribers, to close or reopen any topic in the wpForo forum, disrupting discussions. It requires the attacker to submit a valid security token along with the topic ID, bypassing the usual permissions needed for moderators.

This vulnerability allows authenticated users, like subscribers, to approve or unapprove any forum post without proper permissions, effectively bypassing moderation controls. To exploit this, an attacker just needs to be logged in and submit a valid request with the post ID they want to manipulate.