CVE-2026-28556 | gVectors wpForo Forum up to 2.4.15 topic_move/topic_merge/topic_split authorization

A vulnerability was found in gVectors wpForo Forum up to 2.4.15. It has been rated as critical. This vulnerability affects the function topic_move/topic_merge/topic_split. Performing a manipulation results in missing authorization.

This vulnerability is known as CVE-2026-28556. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.