A vulnerability was found in saeros1984 Neoforum Plugin up to 1.0 on WordPress. It has been classified as critical. Impacted is an unknown function. This manipulation causes sql injection.
This vulnerability is registered as CVE-2026-24624. Remote exploitation of the attack is possible. No exploit is available.