CVE-2026-28559 | gVectors wpForo Forum up to 2.4.15 Global RSS Feed Endpoint ID information disclosure

A vulnerability labeled as problematic has been found in gVectors wpForo Forum up to 2.4.15. The affected element is an unknown function of the component Global RSS Feed Endpoint. The manipulation of the argument ID results in information disclosure.

This vulnerability was named CVE-2026-28559. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.