Skip to content
OpenAdvisories

Vendor

Asgaros

5 known vulnerabilities.

Products

Asgaros Forum 5
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-39779

    WordPress Asgaros Forum plugin <= 3.4.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asgaros Forum: from n/a through 3.4.0.

    Asgaros Asgaros Forum
  • Medium 4.3
    CVE-2025-12901

    Asgaros Forum <= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update

    The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing nonce validation on the set_subscription_level() function. This makes it possible for unauthenticated attack…

    Asgaros Asgaros Forum Web / CMS
  • Medium 6.5
    CVE-2025-39514

    WordPress Asgaros Forum plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asgaros Asgaros Forum asgaros-forum allows Stored XSS.This issue affects Asgaros Forum: from n/a through <= 3.2.1.

    Asgaros Asgaros Forum
  • Medium 4.3
    CVE-2025-32227

    WordPress Asgaros Forum plugin <= 3.0.0 - File Upload Numbers Bypass vulnerability

    Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum asgaros-forum allows Identity Spoofing.This issue affects Asgaros Forum: from n/a through <= 3.0.0.

    Asgaros Asgaros Forum