Browse CVEs

HIGH 8.8 CVE-2024-32440 Cross-Site Request Forgery (CSRF) vulnerability in Thomas Belser Asgaros Forum.This issue affects Asgaros Forum: from n/a through 2.8.0. Asgaros Forum 2.9.0+ Fix from $1,9502024-04-15 CRITICAL 9.8 CVE-2024-22284 Deserialization of Untrusted Data vulnerability in Thomas Belser Asgaros Forum.This issue affects Asgaros Forum: from n/a through 2.7.2. Asgaros Forum 2.8.0+ Fix from $2,3002024-01-24 CRITICAL 9.8 CVE-2023-5604 The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configu… Asgaros Forum 2.7.1+ Fix from $2,3002023-11-27 HIGH 8.8 CVE-2022-41608 Cross-Site Request Forgery (CSRF) vulnerability in Thomas Belser Asgaros Forum plugin <= 2.2.0 versions. Asgaros Forum 2.3.0+ Fix from $1,9502023-05-22 HIGH 8.8 CVE-2022-0411 The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a SQL statement via a REST rout… Asgaros Forum 2.0.0+ Fix from $1,9502022-02-28 HIGH 7.2 CVE-2021-25045 The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forum_id parameter before using it in a SQL statement when editing … Asgaros Forum 1.15.15+ Fix from $1,9502022-01-24 CRITICAL 9.8 CVE-2021-24827EPSS 13% The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statem… Asgaros Forum 1.15.13+ Fix from $2,3002021-11-08