In order for image attachments to work, we are forced to turn off secure attachment urls. We're currently running wpforo version 1.9.9.2. There have been multiple other reports of this, so it doesn't seem to be an isolated case.
Two questions about this issue:
1.) What would be causing secure attachment urls to break images in the first place if "secure attachment urls" is turned on?
2.) What are the downsides/risks to having secure attachment urls turned off?