The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.
CVSS Score
9.8
EPSS Score
0.006
Published
2018-05-28