wpForo Forum < 2.1.0 - Subscriber+ Arbitrary File Upload - How-to and Troubleshooting - wpForo 2.0

RE: wpForo Forum < 2.1.0 - Subscriber+ Arbitrary File Upload

kirua78 — Tue, 22 Nov 2022 16:41:05 +0000

Perfect, thanks for your help

Chris — Tue, 22 Nov 2022 13:35:28 +0000

@kirua78,

You have spam protection in wpForo Settings, just look carefully and you will find it.

Or insert your domain in this path:

https://yourdomain/wp-admin/admin.php?page=wpforo-settings&wpf_tab=antispam

kirua78 — Mon, 21 Nov 2022 15:46:16 +0000

Hi Chris,

Thanks for your reply, but i dont have the setting spam protection, i need to install a specific addons ?

Chris — Mon, 21 Nov 2022 14:39:58 +0000

Hi @kirua78,

Navigate to Dashboard > wpForo > Settings > Spam Protection, and check Do not allow attaching files with following extensions field

kirua78 — Mon, 21 Nov 2022 11:12:02 +0000

Hi,

I'am using wpforo in version 1.9.9.1 and the plugin is vulnerable as : https://wpscan.com/vulnerability/d54d5500-e034-4a4b-ab06-af2e84b7554b

Because of some custom code it is impossible to update the plugin for this time.

My question it is possible to disable the upload for subscriber user ? Or do anything that can fix the vuln ?

Thanks for your help