VulnCheck

FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action

XenForo < 2.3.13 Missing Authorization via force-agreement Controller

XenForo < 2.3.13 MFA Bypass via Passkey TFA Provider

XenForo < 2.3.13 OAuth2 Authorization Code Token Theft via redirect_uri Bypass

XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpoint

XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider

XenForo < 2.3.13 SSRF via PayPal REST Webhook Handler

XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook

XenForo < 2.3.13 Refresh Token Replay via Expired Access Token

XenForo < 2.3.13 OAuth2 Authorization Code Reuse