Find real vulnerabilities before they ship
Vulnerability Database › packagist › CVE-2011-1150
bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.
Base Score