2026-03-02 · 2 min · BitNinja Team

Server Security Alert: wpForo Vulnerability CVE-2026-28559

The wpForo Forum version 2.4.14 has a serious information disclosure vulnerability. This flaw allows unauthenticated users to access private and unapproved forum topics through the global RSS feed endpoint. Attackers can exploit this by making a simple request to the RSS feed...