A vulnerability was found in tomdever wpForo Forum Plugin up to 3.0.2 on WordPress. It has been rated as critical. The impacted element is the function
topic_add. Performing a manipulation of the argument body results in file inclusion.
This vulnerability is cataloged as CVE-2026-5809. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
