Asgaros Forum vulnerabilities

2 known vulnerabilities in Asgaros Forum from Asgaros. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Asgaros Forum: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-11452Nov 8, 2025AsgarosEPSS 1.6%

  The Asgaros Forum plugin for WordPress is vulnerable to SQL Injection via the '$_COOKIE['asgarosforum_unread_exclude']' cookie in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient prepar

• 9.8 Critical severity

  Asgaros Forum: Improper Control of Generation of Code

  CVE-2023-5604Nov 27, 2023Asgaros ForumEPSS 2.35%

  The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthenticated users to upload dangerous files (e.g. .php, .phtml), potentially leading to