CyberSecBulletin

Asgaros vulnerabilities

We track 2 vulnerabilities in Asgaros products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 8, 2025.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Asgaros vulnerabilities

  • 7.5 High severity

    Asgaros Forum: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2025-11452AsgarosEPSS 1.6%

    The Asgaros Forum plugin for WordPress is vulnerable to SQL Injection via the '$_COOKIE['asgarosforum_unread_exclude']' cookie in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient prepar

  • 9.8 Critical severity

    Asgaros Forum: Improper Control of Generation of Code

    CVE-2023-5604Asgaros ForumEPSS 2.35%

    The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthenticated users to upload dangerous files (e.g. .php, .phtml), potentially leading to