Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
asgaros-forum
WordPress
· Plugin
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Asgaros Forum <= 3.4.0 - Missing Authorization
CVE-2026-39779
asgaros-forum
WordPress
Medium
No fix reported
2026-10-09
Asgaros Forum <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-39514
asgaros-forum
WordPress
Medium
Fix reported
2025-12-05
Asgaros Forum <= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update
CVE-2025-12901
asgaros-forum
WordPress
Medium
Fix reported
2025-11-12
Asgaros Forum <= 3.1.0 - Unauthenticated SQL Injection
CVE-2025-11452
asgaros-forum
WordPress
High
Fix reported
2025-11-08
Asgaros Forum <= 3.0.0 - Authenticated (Subscriber+) Authorization Bypass
CVE-2025-32227
asgaros-forum
WordPress
Medium
Fix reported
2025-10-30
Asgaros Forum <= 2.8.0 - Cross-Site Request Forgery
CVE-2024-32440
asgaros-forum
WordPress
Medium
Fix reported
2024-04-17
Asgaros Forum <= 1.15.14 - Admin+ SQL Injection via forum_id
CVE-2021-25045
asgaros-forum
WordPress
High
Fix reported
2024-01-22
Asgaros Forum < 2.0.0 - SQL Injection
CVE-2022-0411
asgaros-forum
WordPress
High
Fix reported
2024-01-22
Asgaros Forum <= 2.7.0 - Insufficient Authorization to Authenticated (Admin+) Arbitrary File Upload
CVE-2023-5604
asgaros-forum
WordPress
Medium
Fix reported
2024-01-22
Asgaros Forums <= 1.15.13 - Authenticated Stored Cross-Site Scripting
CVE-2021-42365
asgaros-forum
WordPress
Medium
Fix reported
2024-01-22
Asgaros Forum <= 2.1.0 - Cross-Site Request Forgery
CVE-2022-41608
asgaros-forum
WordPress
High
Fix reported
2024-01-22
Asgaros Forum <= 1.15.12 - Unauthenticated SQL Injection
CVE-2021-24827
asgaros-forum
WordPress
Critical
Fix reported
2024-01-22
Asgaros Forum <= 2.7.2 - Unauthenticated PHP Object Injection in prepare_unread_status
CVE-2024-22284
asgaros-forum
WordPress
Critical
Fix reported
2024-01-22