wpForo Forum < 3.1.3 - Subscriber+ Account Status and Reputation Manipulation via Profile Update Mass Assignment (CVE-2026-12698) | HOL Guard CVE