Hi guys, we're getting urgent security notices from our host and we can't change to 3.x. Help and thanks!
You've already been asnwered here: https://wordpress.org/support/topic/wpforo-2-4-17-vulnerability/
Hi @hoop-ball,
Could you please explain why you cannot switch to wpForo 3.x? It has been designed to have near to zero impact on update. Even the 2.x theme has not been changed and you can continue to use it after update by simple switching from 2026 to 2022 in wpForo > Themes admin page. There is no any blocker or hard change in 3.x that will bring you problems.
Honestly we just didn't have the manpower/resources to vet it. We bumped it up the priority chain and got there, finding what you found.
Hi @hoop-ball ,
I recommend you use some database backup plugin like this one: https://wordpress.org/plugins/updraftplus/
Backup it and update wpForo, I'm sure you'll not even need the backup file, so the update will be very smoothly. In case you had some CSS customization you should go to wpForo > Themes admin page and activate the 2022 Theme, if you don't any i recommend keep the new 2026 theme active.