5 matches found
VulnCheck KEV: CVE-2021-24827
The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue...
CVE-2021-24827
The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue...
WordPress Asgaros Forum Plugin SQL Injection (CVE-2021-24827)
An SQL injection vulnerability exists in WordPress Asgaros Forum plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2021-24827
creationtimestamp| type| source ---|---|--- 2021-11-08 20:29:39+00:00| seen| https://t.me/cibsecurity/32004 2025-07-08 21:02:38+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75jbbfu2w...
CVE-2021-24827 Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection
The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue...