Sploitus

9 exploited vulnerabilities in Asgaros Forum

Vulnerabilities with publicly known exploits

Vendors
WordPress, Thomas Belser, Unknown
With known exploits
9
Affected Asgaros Asgaros Forum versions
< 2.7.1, 1.15.13, 2.9.0, 2.0.0, 2.8.0, 1.15.15, 2.3.0

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2023-5604 1 exploit
CVSS 9.8 CRITICAL 2023-11-27FIX AVAILABLE
Asgaros Forum < 2.7.1 - Unauthenticated Arbitrary File Upload
CVE-2021-24827 2 exploits
CVSS 9.8 CRITICAL 2021-11-08FIX AVAILABLE
WordPress Asgaros Forum < 1.15.13 SQL InjectionAsgaros Forum < 1.15.13 - Unauthenticated SQL Injection
CVE-2024-32440
CVSS 8.8 HIGH 2024-04-15
CVE-2022-0411 1 exploit
CVSS 8.8 HIGH 2022-02-28FIX AVAILABLE
Asgaros Forum < 2.0.0 - Subscriber+ Blind SQL Injection
CVE-2024-22284
CVSS 8.7 HIGH 2024-01-24
CVE-2025-11452
CVSS 7.5 HIGH 2025-11-08FIX AVAILABLE
CVE-2021-25045 1 exploit
CVSS 7.2 HIGH 2022-01-24FIX AVAILABLE
Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id
CVE-2022-41608
CVSS 5.4 MEDIUM 2023-05-22FIX AVAILABLE
CVE-2025-12901
CVSS 4.3 MEDIUM 2025-11-12FIX AVAILABLE