Limited Support
Our support team is currently on holiday from December 25, 2025 to January 7, 2026, and replies may be delayed during this period.
We appreciate your patience and understanding while our team is away. Thank you for being part of the wpForo community!
Merry Christmas and Happy Holidays! 🎄
Hi,
I'am using wpforo in version 1.9.9.1 and the plugin is vulnerable as : https://wpscan.com/vulnerability/d54d5500-e034-4a4b-ab06-af2e84b7554b
Because of some custom code it is impossible to update the plugin for this time.
My question it is possible to disable the upload for subscriber user ? Or do anything that can fix the vuln ?
Thanks for your help
Hi @kirua78,
Navigate to Dashboard > wpForo > Settings > Spam Protection, and check Do not allow attaching files with following extensions field
Hi Chris,
Thanks for your reply, but i dont have the setting spam protection, i need to install a specific addons ?
You have spam protection in wpForo Settings, just look carefully and you will find it.
Or insert your domain in this path:
https://yourdomain/wp-admin/admin.php?page=wpforo-settings&wpf_tab=antispam
Perfect, thanks for your help
