CVE-2021-24827: Asgaros Forum

Critical severity, CVSS 9.8. EPSS: 12.6% chance of exploitation in the next 30 days.

The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue

Affected products

• Asgaros Asgaros Forum: before 1.15.13 (fixed in 1.15.13)

Published 2021-11-08. Last modified 2026-06-17.