A missing authorization vulnerability has been identified in Tomdever wpForo Forum plugin that allows exploitation of incorrectly configured access control security levels. The vulnerability affects wpForo Forum versions from unknown starting point through version 3.0.6. This represents a broken access control issue that could allow unauthorized users to bypass security restrictions and gain inappropriate access to forum functionality or content.