A vulnerability identified as critical has been detected in Tomdever wpForo Forum Plugin up to 3.0.6 on WordPress. Affected is an unknown function. This manipulation causes missing authorization. This vulnerability appears as CVE-2026-42682 . The attack may be initiated remotely. There is no available exploit.