Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 08:51:06 +0000 CVE-2026-80514 — wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass https://db.gcve.eu/vuln/cve-2026-80514 <p><strong>Affected:</strong> Unknown wpForo Forum</p> <p>The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key its per-visitor rate limit on paid AI requests, allowing unauthenticated attackers to bypass the limit by spoofing the header and exhaust the site owner&#39;s metered AI credits.</p> <p><strong>Affected:</strong> Unknown wpForo Forum</p> <p>The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key its per-visitor rate limit on paid AI requests, allowing unauthenticated attackers to bypass the limit by spoofing the header and exhaust the site owner&#39;s metered AI credits.</p> https://db.gcve.eu/vuln/cve-2026-80514