WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in bbPress Move Topics

Move topics from one forum to another, convert post/comments into topic/replies in the same site. For the admin backend.

3Reported vulnerabilities
9.8Highest CVSS score
1.1.6Latest version
90+Active installs

What to do now

Update bbPress Move Topics to 1.1.6 or later. 2 of these have a fixed version available. Updating resolves them.

Plugin last updated: March 11, 2018 / Tested up to WordPress: 4.9.31 / View on wordpress.org

This plugin has not been updated in over two years. New vulnerabilities may never be fixed. Consider an alternative.

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2018-21005 Critical 9.8 2.1% Before 1.1.6 1.1.6 August 27, 2019
CVE-2018-21006 High 8.8 0.7% Before 1.1.6 1.1.6 August 27, 2019
CVE-2025-49959 Medium 6.1 0.2% 1.1.6 and earlier — July 16, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.