Wpforo

Estonia Freemium wpforo.com ↗
A
TRUSTED
7
Total CVEs
4
Crit / High
3
Medium
0%
Unpatched
0%
Patched
6.9
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
0%
Under Review
100%
✓ 0 patched ✗ 0 unpatched ~ 7 under review
▸ Intelligence by Audience
PoC Available
6 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"wpforo" port:443
org:"Wpforo" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-40767 0.29% exploitation probability
CVE-2025-4224 0.26% exploitation probability
CVE-2025-13126 0.12% exploitation probability
CVE-2025-0764 0.12% exploitation probability
CVE-2025-4406 0.08% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
7
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
6.9
Security grade
A (TRUSTED)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-17
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory - The Hacker News
The Hacker News 2026-10-01
▸ Recent CVEs showing 20 of 7
CVE IDSeverityPatchEPSSDate
CVE-2026-40767 7.5 HIGH PATCH UNDER REVIEW 0.29% 2026-06-15
CVE-2025-13126 PoC 7.5 HIGH PATCH UNDER REVIEW 0.12% 2025-12-14
CVE-2025-11740 PoC 6.5 MEDIUM PATCH UNDER REVIEW 0.03% 2025-11-01
CVE-2025-4203 PoC 7.5 HIGH PATCH UNDER REVIEW 0.07% 2025-10-25
CVE-2025-4406 PoC 5.4 MEDIUM PATCH UNDER REVIEW 0.08% 2025-07-10
CVE-2025-4224 PoC 7.2 HIGH PATCH UNDER REVIEW 0.26% 2025-06-03
CVE-2025-0764 PoC 6.5 MEDIUM PATCH UNDER REVIEW 0.12% 2025-02-28
View all 7 CVEs for Wpforo →
▸Intel
CountryEstonia
LicenseFreemium
Trust ScoreA — TRUSTED
Max CVSS7.5
Last Updated2026-10-17
▸Top Weaknesses
CWE-89
SQL Injection
3 occurrences in Wpforo CVEs (43% of total)
CWE-89 ⓘ
3
CWE-79
Cross-Site Scripting (XSS)
2 occurrences in Wpforo CVEs (29% of total)
CWE-79 ⓘ
2
CWE-22
Unknown Weakness Type
1 occurrence in Wpforo CVEs (14% of total)
CWE-22 ⓘ
1
CWE-281
Unknown Weakness Type
1 occurrence in Wpforo CVEs (14% of total)
CWE-281 ⓘ
1
▸Company Profile

Wpforo is a US-based software company that develops the wpForo forum plugin for WordPress, a popular community and discussion board solution. While not a major cybersecurity vendor, its plugin has been subject to 23 tracked CVEs, indicating potential security risks for WordPress sites that deploy it.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -83% better
CVE count 2026 vs 2025:  6 → 1 CVEs
Patch Speed ⓘ Excellent (<20% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€0K
Est. GDPR High
€0K

Based on 0 critical CVEs, 0 CISA KEV, 0% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Wpforo A valtersit.com