Security Advisory

CVE-2026-12697

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-31 06:00:11

Last updated 2026-07-31 16:47:17

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The wpForo Forum WordPress plugin before 3.1.2 does not verify that an AI chat conversation belongs to the requesting user before deleting its messages, allowing users with a subscriber-level account to permanently delete the stored AI chat message history of any other user.

← Browse all CVEs View on cve.org ↗