Asgaros Forum vulnerabilities
We track 2 vulnerabilities in Asgaros Forum products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 27, 2023.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Asgaros Forum vulnerabilities
- 9.8 Critical severity
Asgaros Forum: Improper Control of Generation of Code
The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthenticated users to upload dangerous files (e.g. .php, .phtml), potentially leading to
- 8.8 High severity
Asgaros Forum: Improper Neutralization of Special Elements used in an SQL Command
The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a SQL statement via a REST route of the plugin (accessible to any authenticated user), leading to a SQL injection