Plugin icon

Asgaros Forum

asgaros-forum

Vulnerabilities:

12

Last Updated:

November 8, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-11-11
Title
Asgaros Forum < 3.3.0 - Cross-Site Request Forgery to Subscription Settings Update
Fixed in
Fixed in 3.3.0
CVSS
4.3 (medium)
Published
2025-11-07
Title
Asgaros Forum < 3.2.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.2.0
CVSS
7.5 (high)
Published
2025-04-16
Title
Asgaros Forum < 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.0
CVSS
6.4 (medium)
Published
2025-04-07
Title
Asgaros Forum < 3.1.0 - Subscriber+ Authorization Bypass
Fixed in
Fixed in 3.1.0
CVSS
4.3 (medium)
Published
2024-04-12
Title
Asgaros Forum < 2.9.0 - Cross-Site Request Forgery
Fixed in
Fixed in 2.9.0
CVSS
4.3 (medium)
Published
2024-01-16
Title
Asgaros Forum < 2.8.0 - Unauthenticated PHP Object Injection in prepare_unread_status
Fixed in
Fixed in 2.8.0
CVSS
9.8 (critical)
Published
2023-11-06
Title
Asgaros Forum < 2.7.1 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 2.7.1
CVSS
10.0 (critical)
Published
2022-12-22
Title
Asgaros Forum <= 2.2.0 - Cross-Site Request Forgery
Fixed in
Fixed in 2.2.0
CVSS
5.4 (medium)
Published
2022-01-31
Title
Asgaros Forum < 2.0.0 - Subscriber+ Blind SQL Injection
Fixed in
Fixed in 2.0.0
CVSS
7.7 (high)
Published
2021-12-21
Title
Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id
Fixed in
Fixed in 1.15.15
CVSS
6.8 (medium)
Published
2021-11-29
Title
Asgaros Forums < 1.15.14 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.15.14
CVSS
3.5 (low)
Published
2021-10-11
Title
Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.15.13
CVSS
8.6 (high)