https://kidstime-netzwerk.de - iThemes Security Site Scanner

WordPress Asgaros Forum plugin <= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update vulnerability

Don't mute a vulnerability until you've confirmed your current version has a fix, or the issue doesn't affect your site.

Type:: Cross Site Request Forgery (CSRF)
Score:: 4.3

Fixed in Version 3.3.0

PatchStack

Details

CVE

2025-12901

Publicly Published: 2025-11-12
Created: 2025-11-12

WordPress Asgaros Forum plugin <= 3.1.0 - Unauthenticated SQL Injection vulnerability

Don't mute a vulnerability until you've confirmed your current version has a fix, or the issue doesn't affect your site.

Type:: SQL Injection
Score:: 9.3

Fixed in Version 3.2.0

PatchStack

Details

CVE

2025-11452

Publicly Published: 2025-11-10
Created: 2025-11-10

WordPress Asgaros Forum plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability

Don't mute a vulnerability until you've confirmed your current version has a fix, or the issue doesn't affect your site.

Type:: Cross Site Scripting (XSS)
Score:: 6.5

Fixed in Version 3.3.0

PatchStack

Details

CVE

2025-39514

Publicly Published: 2025-04-16
Created: 2025-04-16